HackingStolen CredentialsCustomer Data InvolvedPIIPHIIDENTITY_BASICLowContained
James J. Lynch, MD Ltd.
bd_d2a77129f94bfc61 · schema v1 · pii pii-v1
Full breach record for James J. Lynch, MD Ltd. →James J. Lynch, MD Ltd. DBA Swift Institute, a medical provider, notified consumers of a data breach discovered on January 30, 2025. Unauthorized individuals copied files containing personal and protected health information. The organization provided 12 months of free credit monitoring and fraud assistance through Cyberscout.
Vermont clock✗ VT AG >45 bday45 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_46f5c3da1506e1edCalifornia State AGfiled 2025-12-12Candidate
- bd_c3a4d39b02a7b3b3Montana State AGfiled 2025-12-12Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-12-12-james-j-lynch-md-ltd-dba-swift-institute-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 12, 2025
- Raw hash
- 2d63b47abebb47758c345dd630cb6fe69118f52da51f2bd57b4b5145969c0f43
Reporting entity
- Name
- James J. Lynch, MD Ltd.norm: james j lynch md
Victim entity
- Name
- James J. Lynch, MD Ltd.norm: james j lynch md
Incident
- Discovered
- Jan 30, 2025
- Materiality determined
- —
- Notification sent
- Dec 10, 2025
- Affected individuals
- Not disclosed
- Data types
- PIIPHIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Filed notice with Vermont Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 45 weeks(316 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.