Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICCREDENTIALSLowContained
Genesis Wealth Advisor Group, LLC
bd_bf87c3a057be82c7 · schema v1 · pii pii-v1
Full breach record for Genesis Wealth Advisor Group, LLC →Genesis Wealth Advisor Group, LLC notified Vermont AG of a March 10, 2025 incident where an employee's email account was compromised via unauthorized access. The attacker accessed files containing names and other personal data. The firm secured the account, investigated, and is offering Kroll identity monitoring services to affected individuals.
Vermont clock✗ VT AG >45 bday21 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_10df297d4e56d5fbIndiana State AGfiled 2025-08-07Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-08-07-genesis-wealth-advisor-group-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 7, 2025
- Raw hash
- 4fd2085d1baa0ad050fba538fd0c3c2197b9cdb9e86cbe2479179edd8cbfa2ab
Reporting entity
- Name
- Genesis Wealth Advisor Group, LLCnorm: genesis wealth advisor
Victim entity
- Name
- Genesis Wealth Advisor Group, LLCnorm: genesis wealth advisor
Incident
- Discovered
- Mar 10, 2025
- Materiality determined
- —
- Notification sent
- Aug 7, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 21 weeks(150 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.