HackingStolen CredentialsTargetedFINANCIAL_ACCOUNTIDENTITY_BASICLowContained
AllEarth Renewables
bd_95952681b9414c8f · schema v1 · pii pii-v1
Full breach record for AllEarth Renewables →AllEarth Renewables notified consumers of a security incident detected on October 7, 2025, involving unauthorized access to its business bank account system. The incident potentially exposed customer and vendor ACH payment information, including bank account numbers, routing numbers, and account holder names. No evidence of fraudulent use was found at the time of notification.
Vermont clock⏱ VT AG >14 bday5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-11-10-allearth-renewables-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 10, 2025
- Raw hash
- daac31dbe6bfc53c003a4fcd2ba91e6e39f544844432939b3f98bf7e21e228f4
Reporting entity
- Name
- AllEarth Renewablesnorm: allearth renewables
- Domain
- allearthrenewables.com
Victim entity
- Name
- AllEarth Renewablesnorm: allearth renewables
- Domain
- allearthrenewables.com
Incident
- Discovered
- Oct 7, 2025
- Materiality determined
- —
- Notification sent
- Oct 17, 2025
- Affected individuals
- Not disclosed
- Data types
- FINANCIAL_ACCOUNTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 5 weeks(34 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.