Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICCREDENTIALSLowContained
John P. Meehan Agency, Inc.
bd_9d11ac14a058d2de · schema v1 · pii pii-v1
Full breach record for John P. Meehan Agency, Inc. →John P. Meehan Agency, Inc. notified consumers of a data breach affecting email accounts between July 2 and July 8, 2024. Unauthorized access was gained via phishing, leading to the theft of names and additional personal data. The agency engaged forensic investigators and offered complimentary credit monitoring to affected individuals.
Vermont clock✗ VT AG >45 bday17 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_4fae4fbaa5b90847Maine State AGfiled 2025-11-21Verified
- bd_e4d5e36aabb7e9c6New Hampshire State AGfiled 2025-11-21Verified
- bd_cfaed4930f9ad271Indiana State AGfiled 2025-11-19(2d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-11-21-john-p-meehan-agency-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 21, 2025
- Raw hash
- 8edd9de0938ef257408b83a9b98c1cc2929df2fed1748cefa4eb89d52c4a84d1
Reporting entity
- Name
- John P. Meehan Agency, Inc.norm: john p meehan agency
Victim entity
- Name
- John P. Meehan Agency, Inc.norm: john p meehan agency
Incident
- Discovered
- Jul 8, 2024
- Materiality determined
- —
- Notification sent
- Nov 21, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- ExternalFinancial
- Initial access
- phishing_link
Compliance
- Time to disclose
- 17 months(501 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.