HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICMediumContained
HCF of Shawnee
bd_bd9130166aa0f36f · schema v1 · pii pii-v1
Full breach record for HCF of Shawnee →HCF of Shawnee notified consumers of a data breach affecting personal information including names, SSNs, DOBs, financial account numbers, and medical/insurance info. The breach involved unauthorized access to the management company's computer systems starting September 17, 2024, discovered October 3, 2024. HCF engaged forensic investigators, notified law enforcement, and offered credit monitoring.
Vermont clock✗ VT AG >45 bday14 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-01-09-hcf-shawnee-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 9, 2025
- Raw hash
- 1dd540c6a5981950d29c5358512a3bb2b0174ea14977cb9a9332e286d7a6f267
Reporting entity
- Name
- HCF of Shawneenorm: hcf of shawnee
Victim entity
- Name
- HCF of Shawneenorm: hcf of shawnee
Incident
- Discovered
- Oct 3, 2024
- Materiality determined
- —
- Notification sent
- Jan 9, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified law enforcement and is cooperating with its investigation
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 14 weeks(98 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.