Social EngineeringPhishingTargetedIDENTITY_BASICLowContained
Roger Keith and Sons Insurance Agency
bd_a5dda1583c1020cf · schema v1 · pii pii-v1
Full breach record for Roger Keith and Sons Insurance Agency →The Roger Keith and Sons Insurance Agency notified Vermont consumers of a data breach discovered on January 27, 2025. An unauthorized party accessed an employee email account and the network via a phishing attack. The incident involved full names. The agency contained the breach, engaged forensic investigators, and is offering complimentary credit monitoring.
Vermont clock✗ VT AG >45 bday39 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
A leak claim by silentransomgroup about this victim predates this filing by 206 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_e1cea9af07d1724aNew Hampshire State AGfiled 2025-11-03(5d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-10-29-roger-keith-and-sons-insurance-agency-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 29, 2025
- Raw hash
- dc0d46370e368f8e300df64ba1e968eca72d7f4cd15d1f5b0398ab05b9badb81
Reporting entity
- Name
- Roger Keith and Sons Insurance Agencynorm: roger keith and sons insurance agency
- Domain
- rogerkeith.com
Victim entity
- Name
- Roger Keith and Sons Insurance Agencynorm: roger keith and sons insurance agency
- Domain
- rogerkeith.com
Incident
- Discovered
- Jan 27, 2025
- Materiality determined
- —
- Notification sent
- Oct 29, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 39 weeks(275 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.