HackingStolen CredentialsData ExfiltratedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICAUTHENTICATIONMediumContained
Children's Center of Hamden
bd_cfdb015f9b5af457 · schema v1 · pii pii-v1
Full breach record for Children's Center of Hamden →The Children's Center of Hamden notified consumers of a data security incident discovered on December 28, 2024. An unauthorized actor acquired files containing personal and protected health information, including names, SSNs, driver's licenses, biometric data, and medical information. The organization engaged forensic experts, secured its network, and offered 24 months of credit monitoring and identity theft protection through Cyberscout.
Vermont clock✗ VT AG >45 bday35 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-08-27-childrens-center-hamden-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 27, 2025
- Raw hash
- a68371796f424bb63889afd443a2c36f5ad51616b75122cc57ea1e91a5426765
Reporting entity
- Name
- Children's Center of Hamdennorm: children s center of hamden
Victim entity
- Name
- Children's Center of Hamdennorm: children s center of hamden
Incident
- Discovered
- Dec 28, 2024
- Materiality determined
- —
- Notification sent
- Aug 12, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICAUTHENTICATION
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 35 weeks(242 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.