HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Gelinas & Ward LLP
bd_ad7590a1ec3e17f2 · schema v1 · pii pii-v1
Full breach record for Gelinas & Ward LLP →Gelinas & Ward LLP notified consumers of a data breach occurring on November 6, 2024, involving unauthorized copying of files containing names, driver's licenses, SSNs, DOBs, and payment card numbers. The firm notified federal law enforcement and offered 12 months of credit monitoring. The notice was filed with the Vermont Attorney General on June 26, 2025.
Vermont clock✗ VT AG >45 bday33 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_a7346ce3baf6acd8Maine State AGfiled 2025-06-26Candidate
- bd_ba60308e204d5133New Hampshire State AGfiled 2025-06-26Candidate
- bd_7a6fa05d81dad7c2New Hampshire State AGfiled 2025-08-08(43d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-06-26-gelinas-ward-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 26, 2025
- Raw hash
- c930b88587414e35a7fc443e1da3d5e62a39c19e0f11fcfda5dadd14df7a2e70
Reporting entity
- Name
- Gelinas & Ward LLPnorm: gelinas ward
Victim entity
- Name
- Gelinas & Ward LLPnorm: gelinas ward
Incident
- Discovered
- Nov 6, 2024
- Materiality determined
- Jun 26, 2025
- Notification sent
- Jun 26, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcement
Compliance
- Time to disclose
- 33 weeks(232 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.