HackingTargetedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Lincoln Families
bd_c84936c5442b990f · schema v1 · pii pii-v1
Full breach record for Lincoln Families →Lincoln Families notified Vermont AG and consumers of a network intrusion occurring Jan 17–Feb 11, 2022. Investigation concluded Jan 29, 2023. Exposed data included full name and government identifiers (SSN). One Rhode Island resident confirmed impacted. Remediation included credit monitoring and enhanced internal controls.
Vermont clock✗ VT AG >45 bday14 months discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_45e4b88786fdef18Montana State AGfiled 2023-03-01(1d gap)Candidate
- bd_ef6c7f497b6c4492California State AGfiled 2023-03-01(1d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-02-28-lincoln-families-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 28, 2023
- Raw hash
- ac642361ab26b0b1e35e6324eec67ea7b9603ad2ab927007d53586d312dd5fe2
Reporting entity
- Name
- Lincoln Familiesnorm: lincoln families
Victim entity
- Name
- Lincoln Familiesnorm: lincoln families
Incident
- Discovered
- Jan 17, 2022
- Materiality determined
- Feb 28, 2023
- Notification sent
- Feb 28, 2023
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed notice with the Office of the Vermont Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 14 months(407 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.