HackingStolen CredentialsDelayed DiscoveryIDENTITY_BASICLowContained
Neubert, Pepe & Monteith, P.C.
bd_ab8d1895ad2ec319 · schema v1 · pii pii-v1
Full breach record for Neubert, Pepe & Monteith, P.C. →Neubert, Pepe & Monteith, PC notified consumers of a data security incident where an unauthorized actor accessed files containing names starting March 1, 2024. The firm engaged cybersecurity experts, reported to the FBI, and offered identity protection services. Notification was sent September 12, 2025.
Vermont clock✗ VT AG >45 bday18 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_3272a41765ad1c16Indiana State AGfiled 2025-09-15(1d gap)Verified
- bd_36ad14d78599ce2fNew Hampshire State AGfiled 2025-09-15(1d gap)Verified
- bd_cd22a03fb6b5a33aMaine State AGfiled 2025-09-15(1d gap)Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-09-16-neubert-pepe-monteith-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 16, 2025
- Raw hash
- 7cf62f7a3ac0b4401df5b67675df7c4ea498b115e448dfa15c8c341b67fb83c7
Reporting entity
- Name
- Neubert, Pepe & Monteith, P.C.norm: neubert pepe monteith
Victim entity
- Name
- Neubert, Pepe & Monteith, P.C.norm: neubert pepe monteith
Incident
- Discovered
- Apr 8, 2024
- Materiality determined
- —
- Notification sent
- Sep 12, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Reported the incident to the FBI
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 18 months(526 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.