HackingStolen CredentialsData ExfiltratedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Brett-Robinson
bd_aeb905d46a06b789 · schema v1 · pii pii-v1
Full breach record for Brett-Robinson →Brett Robinson Vacation Rentals notified consumers of a data security incident occurring between March 26 and April 21, 2025. Unauthorized access or acquisition of personal data, including full names and Social Security Numbers, was discovered on December 29, 2025. The company engaged external cybersecurity professionals and is offering 24 months of complimentary credit monitoring and fraud assistance to affected individuals.
Leak gap clock✗ Leak >180d9 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
A leak claim by abyss about this victim predates this filing by 261 days.View originating leak claim
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-01-07-brett-robinson-vacation-rentals-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 7, 2026
- Raw hash
- ae468fce03931068ad6ee37e462b4e60e370ed8a78f9c63c08113ee770b35c40
Reporting entity
- Name
- Brett-Robinsonnorm: brett robinson
- Domain
- brett-robinson.com
Victim entity
- Name
- Brett-Robinsonnorm: brett robinson
- Domain
- brett-robinson.com
Incident
- Discovered
- Dec 29, 2025
- Materiality determined
- Jan 7, 2026
- Notification sent
- Jan 7, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 9 days(9 days from discovery to filing)
- Compliance flags
- Leak >180dVT AG ≤14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.