HackingStolen CredentialsData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Vomela Specialty Company
bd_95d6fb870b46ebe6 · schema v1 · pii pii-v1
Full breach record for Vomela Specialty Company →Vomela Specialty Company notified the Maryland AG of a data event affecting 1 Maryland resident. Unauthorized access occurred between Dec 19-21, 2024, resulting in the download of files containing names and Social Security numbers. The company notified federal law enforcement and offered 12 months of credit monitoring via TransUnion.
Maryland clock⏱ MD AG >30d7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_2aa46e8eae3350a3Indiana State AGfiled 2025-02-10Verified
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376343.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 10, 2025
- Raw hash
- bae0bef9f39753a7f2f15702d144e0b45190d9f7c2909226f4ecf4b9a2acacd8
Reporting entity
- Name
- Vomela Specialty Companynorm: vomela specialty
Victim entity
- Name
- Vomela Specialty Companynorm: vomela specialty
Incident
- Discovered
- Dec 21, 2024
- Materiality determined
- —
- Notification sent
- Feb 10, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified Maryland Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 7 weeks(51 days from discovery to filing)
- Compliance flags
- MD AG >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.