HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumActive
UnitedLex Corporation
bd_cc400061f6870efc · schema v1 · pii pii-v1
Full breach record for UnitedLex Corporation →UnitedLex Corporation notified consumers of a data security incident discovered on March 6, 2023, where an unauthorized actor accessed the corporate environment and took data. Impacted data likely included names, SSNs, payroll financial account numbers, and benefits information. UnitedLex engaged cybersecurity experts, reset passwords, and provided 24 months of credit monitoring and identity protection services via Kroll.
Vermont clock✗ VT AG >45 bday18 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
A leak claim by monti about this victim predates this filing by 117 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_94b8e14fe4dfd9d5Leak Sitealphvfiled 2023-04-05(98d gap)Verified by operator
Regulatory filings (1) · sorted by filing gap
- bd_286b470919becd34Maine State AGfiled 2023-07-12Verified by operator
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-07-12-unitedlex-corporation-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 12, 2023
- Raw hash
- 96fbd21cfc0ad070b31dbdc3af41f84feabc324e3a8c43a36256850e8e18ea17
Reporting entity
- Name
- UnitedLex Corporationnorm: unitedlex
- Domain
- unitedlex.com
Victim entity
- Name
- UnitedLex Corporationnorm: unitedlex
- Domain
- unitedlex.com
Incident
- Discovered
- Mar 6, 2023
- Materiality determined
- —
- Notification sent
- Jun 1, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 18 weeks(128 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.