Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Homeless Prevention
bd_ac5aa0935a329f25 · schema v1 · pii pii-v1
Full breach record for Homeless Prevention →Homeless Prevention Center notified Vermont AG of a phishing incident on March 7, 2025, compromising staff email accounts. Hackers viewed emails containing PII (name, address, SSN) of individuals served by the center. No emails were downloaded. The company provided one year of credit monitoring and identity theft protection.
Vermont clock✓ VT AG ≤14 bday19 days discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-03-26-homeless-prevention-center-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 26, 2025
- Raw hash
- 0c90b45c3ef826952b1874cae9c88776d824b5cc660618cba53c7afa7510dc2e
Reporting entity
- Name
- Homeless Prevention Centernorm: homeless prevention center
- Domain
- hpcvt.org
Victim entity
- Name
- Homeless Preventionnorm: homeless prevention
- Domain
- hpcvt.org
Incident
- Discovered
- Mar 7, 2025
- Materiality determined
- Mar 26, 2025
- Notification sent
- Mar 26, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- phishing_link
Compliance
- Time to disclose
- 19 days(19 days from discovery to filing)
- Compliance flags
- VT AG ≤14 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.