HackingDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPHIMediumContained
Cherry Street Services, Inc.
bd_b0cafa58dea56bd4 · schema v1 · pii pii-v1
Full breach record for Cherry Street Services, Inc. →Cherry Street Services, Inc. notified consumers of a December 21, 2023 data security incident involving improper access to systems. Potentially affected data included names, addresses, DOBs, SSNs, health insurance info, and financial account numbers. The company engaged third-party specialists, implemented technical safeguards, and offered credit monitoring.
Vermont clock✗ VT AG >45 bday17 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_4665d1e8abdb59ebMaine State AGfiled 2024-04-17Candidate
- bd_8ed61777b01dc336Indiana State AGfiled 2024-04-16(1d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-04-17-cherry-street-services-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 17, 2024
- Raw hash
- 583c13487af9f25990329c3d74b14b11107eac04416852b9a5ad2c05af65736a
Reporting entity
- Name
- Cherry Street Services, Inc.norm: cherry street
Victim entity
- Name
- Cherry Street Services, Inc.norm: cherry street
Incident
- Discovered
- Dec 21, 2023
- Materiality determined
- —
- Notification sent
- Apr 16, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 17 weeks(118 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.