HackingTargetedIDENTITY_BASICLowContained
WaterStreet Company
bd_9d8762d44215a62d · schema v1 · pii pii-v1
Full breach record for WaterStreet Company →WaterStreet Company notified consumers of a data breach discovered on March 17, 2025, involving unauthorized access to files containing personal information. The company investigated, secured systems, and is offering credit monitoring. The specific data elements were redacted in the template but included names.
Vermont clock⏱ VT AG >14 bday7 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_46e579e8a85f1045Maine State AGfiled 2025-05-07Candidate
- bd_d7b77925736857c7New Hampshire State AGfiled 2025-05-07Verified
- bd_d25bdafd457e3641Indiana State AGfiled 2025-05-17(10d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-05-07-waterstreet-company-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 7, 2025
- Raw hash
- 52a1ee34a639fcf32bd9e94c47172038f71046f83f89cf2bbe53f5a84708fa3d
Reporting entity
- Name
- WaterStreet Companynorm: waterstreet
- Domain
- waterstreetcompany.com
Victim entity
- Name
- WaterStreet Companynorm: waterstreet
- Domain
- waterstreetcompany.com
Incident
- Discovered
- Mar 17, 2025
- Materiality determined
- —
- Notification sent
- May 7, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- notify applicable regulatory authorities as necessary
Compliance
- Time to disclose
- 7 weeks(51 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.