Social EngineeringPhishingData ExfiltratedIDENTITY_BASICPHIHEALTH_BASICLowContained
Laconia Housing and Redevelopment Authority
bd_bbfe9cbf59bebe3b · schema v1 · pii pii-v1
Full breach record for Laconia Housing and Redevelopment Authority →Laconia Housing and Redevelopment Authority notified consumers of a data privacy incident involving unauthorized access to an employee's email account between September 6-9, 2024. The breach exposed names and protected health information. The Authority engaged forensic investigators and reported the incident to HHS OCR.
Vermont clock✗ VT AG >45 bday43 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-07-07-laconia-housing-and-redevelopment-authority-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 7, 2025
- Raw hash
- 0afecc7fcc8b5394f55b55b2c0c35f7a33e17fabf6c37f6f99adc128f6753d70
Reporting entity
- Name
- Laconia Housing and Redevelopment Authoritynorm: laconia housing and redevelopment authority
Victim entity
- Name
- Laconia Housing and Redevelopment Authoritynorm: laconia housing and redevelopment authority
Incident
- Discovered
- Sep 9, 2024
- Materiality determined
- May 13, 2025
- Notification sent
- Jul 7, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPHIHEALTH_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Reported the incident to the Department of Health and Human Services, Office for Civil Rights
- Initial access
- phishing_link
Compliance
- Time to disclose
- 43 weeks(301 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.