MalwareRansomwareStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedData EncryptedMulti-Stage ChainIDENTITY_BASICPIILowContained
Michael T. Gibson P.A.
bd_94b0efd01ee67ffb · schema v1 · pii pii-v1
Full breach record for Michael T. Gibson P.A. →Michael T. Gibson P.A. notified Vermont AG of a breach involving an external IT vendor compromise on July 22, 2024. Attackers exfiltrated PII (names, DOB, contact info) and deployed ransomware on July 23. No specific count of affected individuals was provided. The firm reported to law enforcement, engaged consultants, and claims deleted exfiltrated files.
Vermont clock⏱ VT AG >14 bday29 days discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_26b3bfd41958177eMaine State AGfiled 2024-08-20Candidate
- bd_72ce601c648a0928Montana State AGfiled 2024-08-20Candidate
- bd_b0b7778cf5914f29New Hampshire State AGfiled 2024-08-20Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-08-20-michael-t-gibson-pa-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 20, 2024
- Raw hash
- 8a13d84e27b4247fcc1f25b2d7246d0d7f24f952ad0231cf7ba486f0153730e2
Reporting entity
- Name
- Michael T. Gibson P.A.norm: michael t gibson
Victim entity
- Name
- Michael T. Gibson P.A.norm: michael t gibson
Incident
- Discovered
- Jul 22, 2024
- Materiality determined
- —
- Notification sent
- Aug 21, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPII
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Reported incident to law enforcement
- Initial access
- supply_chain
Compliance
- Time to disclose
- 29 days(29 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.