HackingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICPIILowContained
Sciarabba Walker & Co., LLP
bd_b50d2f70f756033b · schema v1 · pii pii-v1
Full breach record for Sciarabba Walker & Co., LLP →Sciarabba Walker & Co., LLP notified consumers of unauthorized access to two employee email accounts between April 5 and April 22, 2025. The incident involved the compromise of email credentials, leading to the exposure of names and other personal data. The firm engaged third-party cybersecurity specialists, secured the email environment, and is offering credit monitoring services to affected individuals.
Vermont clock✗ VT AG >45 bday22 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_1e70d17e8940c8d4New Hampshire State AGfiled 2025-09-26Verified
- bd_812c9905ea156214Maine State AGfiled 2025-09-26Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-09-26-sciarabba-walker-co-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 26, 2025
- Raw hash
- 67b0017889b3a3a6d1c5f6d2e12c0726b78bd993f21282902a36640762198c42
Reporting entity
- Name
- Sciarabba Walker & Co., LLPnorm: sciarabba walker
Victim entity
- Name
- Sciarabba Walker & Co., LLPnorm: sciarabba walker
Incident
- Discovered
- Apr 22, 2025
- Materiality determined
- —
- Notification sent
- Sep 26, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 22 weeks(157 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.