HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSHEALTH_BASICPHIMediumContained
McLanahan
bd_bb30d7d6cad82174 · schema v1 · pii pii-v1
Full breach record for McLanahan →McLanahan Corporation notified consumers of a security incident involving unauthorized access between Feb 23 and Mar 9, 2024. An actor copied data including names, SSNs, DOBs, payment card numbers, and medical billing info. McLanahan offered 12 months of credit monitoring via TransUnion. Rhode Island resident count is 0; total count undisclosed.
Vermont clock✗ VT AG >45 bday12 months discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_214573ebae4a37f2Maine State AGfiled 2025-02-28Candidate
- bd_7e5a1a0d6edcd543New Hampshire State AGfiled 2025-02-28Verified
- bd_a98ef781682fe3a1Maryland State AGfiled 2025-02-28Verified
- bd_f1d08b609b5f9d7eIndiana State AGfiled 2025-02-28Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-02-28-mclanahan-corporation-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 28, 2025
- Raw hash
- 27dffc9abf1bb6e92e0a9ce42eaf3c015123ebaa7373cf88fa74bdfecbc018a4
Reporting entity
- Name
- McLanahannorm: mclanahan
- Domain
- mclanahan.com
Victim entity
- Name
- McLanahannorm: mclanahan
- Domain
- mclanahan.com
Incident
- Discovered
- Feb 23, 2024
- Materiality determined
- Jan 6, 2025
- Notification sent
- Feb 28, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSHEALTH_BASICPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notice with Vermont Attorney GeneralNotice has not been delayed by law enforcement
Compliance
- Time to disclose
- 12 months(371 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.