Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICLowContained
The Florida Aquarium
bd_c699dafa9697a6e5 · schema v1 · pii pii-v1
Full breach record for The Florida Aquarium →Aquarium of the Pacific notified consumers of a cybersecurity event involving unauthorized access to a single employee email account between April 19 and June 3, 2025. The incident was discovered on June 3, 2025, following unusual activity. The breach likely exposed first and last names. No evidence of misuse was found. The organization engaged forensic specialists, reset passwords, and offered 12 months of credit monitoring.
Vermont clock✗ VT AG >45 bday16 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-09-26-aquarium-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 26, 2025
- Raw hash
- 6ec3e177ddabddcb3b45fb1575f59ac987e0dffbde10fefed5992fe3206b411c
Reporting entity
- Name
- The Florida Aquariumnorm: the florida aquarium
- Domain
- flaquarium.org
Victim entity
- Name
- The Florida Aquariumnorm: the florida aquarium
- Domain
- flaquarium.org
Incident
- Discovered
- Jun 3, 2025
- Materiality determined
- —
- Notification sent
- Sep 25, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 16 weeks(115 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.