HackingDelayed DiscoveryPIIIDENTITY_BASICLowContained
Eckerd Connects
bd_b57072c5e297c8e5 · schema v1 · pii pii-v1
Full breach record for Eckerd Connects →Eckerd Youth Alternatives Inc. dba Eckerd Connects notified consumers of a cybersecurity incident where unauthorized access occurred between Nov 3-11, 2024. Personal information was potentially accessed. The company secured its network, engaged external cybersecurity professionals, and is offering complimentary credit monitoring via Experian IdentityWorks.
Vermont clock✗ VT AG >45 bday13 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_b158fa20470374f6Montana State AGfiled 2025-12-17Candidate
- bd_b53a7d0006e47065Indiana State AGfiled 2025-12-17Verified
- bd_e809a14f277bed7cTexas State AGfiled 2025-12-19(2d gap)Verified
- bd_1e47f996d8d211c6New Hampshire State AGfiled 2025-12-22(5d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-12-17-eckerd-youth-alternatives-dba-eckerd-connects-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 17, 2025
- Raw hash
- ee72350d824aea6b522b6aca47c7c2a4b40c31cbbb45e6dc1c025768c2c1578c
Reporting entity
- Name
- Eckerd Connectsnorm: eckerd connects
Victim entity
- Name
- Eckerd Connectsnorm: eckerd connects
Incident
- Discovered
- Nov 11, 2024
- Materiality determined
- Nov 17, 2025
- Notification sent
- Dec 17, 2025
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Filed notice with Vermont Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 13 months(401 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.