HackingStolen CredentialsDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICMediumContained
STOCK Development
bd_bafa11d865906e23 · schema v1 · pii pii-v1
Full breach record for STOCK Development →Stock Development, LLC reported a data breach where an unauthorized third party accessed its network between April 25, 2023, and March 2, 2024. The incident exposed personal information including names, dates of birth, government IDs (SSN/Driver's License), financial account numbers, and in some cases health information. The company engaged forensic experts, notified law enforcement, and offered credit monitoring services. A specific count of 79 Rhode Island residents was noted; total affected count is undisclosed.
Vermont clock✗ VT AG >45 bday47 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
A leak claim by lockbit_3 about this victim predates this filing by 328 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_8f92d0c14899858eLeak Sitelockbit_3filed 2024-03-03(327d gap)Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-01-24-stock-development-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 24, 2025
- Raw hash
- 353d07a47d726141a4276381a73d5a50d7bc669414c9ce717a87c04678655b84
Reporting entity
- Name
- STOCK Developmentnorm: stock development
- Domain
- stockdevelopment.com
Victim entity
- Name
- STOCK Developmentnorm: stock development
- Domain
- stockdevelopment.com
Incident
- Discovered
- Mar 2, 2024
- Materiality determined
- —
- Notification sent
- Jan 24, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 47 weeks(328 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.