HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTMediumContained
Center for Vein Restoration
bd_bab92f23829f8eed · schema v1 · pii pii-v1
Full breach record for Center for Vein Restoration →Center for Vein Restoration (MD), LLC notified consumers on December 12, 2024, of a data security incident discovered on October 6, 2024. An unauthorized party may have accessed protected health information (PHI) and personal identifiers including SSNs, driver's licenses, and financial data. The company engaged forensic investigators, notified law enforcement, and is offering 12 months of credit monitoring and identity theft protection.
Vermont clock✗ VT AG >45 bday10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_238fbc3688748ddcMaine State AGfiled 2024-12-12Verified
- bd_8dddcacdcc699bf2Montana State AGfiled 2024-12-12Verified
- bd_ab93474d092a3a14HHS OCRfiled 2024-12-05(7d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-12-12-center-vein-restoration-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 12, 2024
- Raw hash
- 5bee7b7b31d8be56a12dc98a8aefc8b1a41fb79074ed3a22f59086dacee06e7f
Reporting entity
- Name
- Center for Vein Restorationnorm: center for vein restoration
- Domain
- centerforvein.com
Victim entity
- Name
- Center for Vein Restorationnorm: center for vein restoration
- Domain
- centerforvein.com
Incident
- Discovered
- Oct 6, 2024
- Materiality determined
- —
- Notification sent
- Dec 12, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified law enforcement
Compliance
- Time to disclose
- 10 weeks(67 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.