Social EngineeringPhishingCustomer Data InvolvedIDENTITY_BASICCREDENTIALSLowContained
American Trust Company
bd_ca6b8a9f4340b8b3 · schema v1 · pii pii-v1
Full breach record for American Trust Company →American Trust Company notified consumers of a data breach involving unauthorized copying of emails between August 8 and August 13, 2024. The incident likely resulted from phishing. Affected data included names and other elements. The company secured its email tenant and offered credit monitoring.
Vermont clock✗ VT AG >45 bday20 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
A leak claim by quantum about this victim predates this filing by 904 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_287d49af40112a72Maine State AGfiled 2025-01-02Candidate
- bd_d444b726115399bcWashington State AGfiled 2025-01-02Verified
- bd_dbf1280fe84a4fa0California State AGfiled 2025-01-02Verified
- bd_e428feb5486279e1Indiana State AGfiled 2025-01-02Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-01-02-american-trust-company-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 2, 2025
- Raw hash
- 338ac673fc08934d8c4740a434241ae65f18873df371e03b8a0cba130accb619
Reporting entity
- Name
- American Trust Companynorm: american trust
Victim entity
- Name
- American Trust Companynorm: american trust
Incident
- Discovered
- Aug 13, 2024
- Materiality determined
- —
- Notification sent
- Jan 2, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1114 Email Collection
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 20 weeks(142 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.