HackingSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICLowContained
Ericsson Inc.
bd_b9339ad22885050f · schema v1 · pii pii-v1
Full breach record for Ericsson Inc. →Ericsson Inc notified Vermont AG that a third-party service provider experienced unauthorized access to files containing personal information (names, and potentially other data elements) between April 17-22, 2025. The incident was discovered on April 28, 2025. Ericsson offered complimentary identity protection services to affected individuals.
Vermont clock✗ VT AG >45 bday45 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_1d0da259aa372497Maine State AGfiled 2026-03-09Candidate
- bd_3ac020b40fae811cCalifornia State AGfiled 2026-03-09Verified by operator
- bd_4b391d16ed54393eNew Hampshire State AGfiled 2026-03-09Verified
- bd_b7aab07b8740f441Texas State AGfiled 2026-03-09Verified
Show 1 more filing ↓Show fewer ↑
- bd_f086a2ecb41cecd3Indiana State AGfiled 2026-03-09Verified by operator
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-03-09-ericsson-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 9, 2026
- Raw hash
- 3c6785394cc5c59f1de711e243b7f154c6b8b8d171d28d4eadd0a091c1311f64
Reporting entity
- Name
- Ericsson Inc.norm: ericsson
- Domain
- ericsson.com
Victim entity
- Name
- Ericsson Inc.norm: ericsson
- Domain
- ericsson.com
Incident
- Discovered
- Apr 28, 2025
- Materiality determined
- —
- Notification sent
- Mar 9, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Notified the Federal Bureau of Investigation
- Initial access
- supply_chain
Compliance
- Time to disclose
- 45 weeks(315 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.