HackingStolen CredentialsTargetedIDENTITY_BASICLowContained
Oxler Private Wealth
bd_c9011eedb5cac2d3 · schema v1 · pii pii-v1
Full breach record for Oxler Private Wealth →Oxler Private Wealth notified consumers of a data breach where an unauthorized actor accessed an employee account, gaining access to files containing names and variable personal data between March 24-27, 2025. The incident was discovered on March 27, 2025. The company engaged a cybersecurity firm, contained the breach, and offered complimentary identity monitoring via Kroll.
Vermont clock✗ VT AG >45 bday18 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_40dcf8627c47b0d2New Hampshire State AGfiled 2025-07-31Verified
- bd_6659bd2b6c39123cMaine State AGfiled 2025-07-31Candidate
- bd_70a584b880281384Indiana State AGfiled 2025-07-31Verified
- bd_c39976dee6a248caMontana State AGfiled 2025-07-31Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-07-31-oxler-private-wealth-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 31, 2025
- Raw hash
- 925074fee65d580b096c75dba7fe42c982ef1202cde4b58a618dbe9a1bf70240
Reporting entity
- Name
- Oxler Private Wealthnorm: oxler private wealth
Victim entity
- Name
- Oxler Private Wealthnorm: oxler private wealth
Incident
- Discovered
- Mar 27, 2025
- Materiality determined
- —
- Notification sent
- Jul 31, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 18 weeks(126 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.