HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICMediumContained
Hartshorne Plunkard Architecture LLC
bd_9603c359585e9d70 · schema v1 · pii pii-v1
Full breach record for Hartshorne Plunkard Architecture LLC →Hartshorne Plunkard Architecture LLC disclosed a data breach where an unauthorized actor accessed its server between June 11-12, 2025. The incident potentially exposed names combined with SSNs, driver's licenses, state IDs, passports, financial information, and medical information. The firm is offering 12 months of credit monitoring services to affected individuals.
Vermont clock✗ VT AG >45 bday13 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_b631d1453f0e4e66Indiana State AGfiled 2025-09-03(8d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-09-11-hartshorne-plunkard-architecture-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 11, 2025
- Raw hash
- 7d2973bd5e7f01601ed77e64e49c5d94cc25af5bf6fac7b76d961518cb9eb71b
Reporting entity
- Name
- Hartshorne Plunkard Architecture LLCnorm: hartshorne plunkard architecture
Victim entity
- Name
- Hartshorne Plunkard Architecture LLCnorm: hartshorne plunkard architecture
Incident
- Discovered
- Jun 11, 2025
- Materiality determined
- Sep 11, 2025
- Notification sent
- Sep 3, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 13 weeks(92 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.