HackingStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTPIIMediumContained
NextProtocol Capital, LP
bd_d7835cd79d3a03f8 · schema v1 · pii pii-v1
Full breach record for NextProtocol Capital, LP →NextProtocol Capital, LP notified investors of a data breach involving its fund administrator, MG Stover, and MG Stover's vendor, Retool. Unauthorized parties queried systems on Sept 19, 2023, accessing investor PII including SSNs and DOBs. Data export is assumed. No specific count of affected individuals was provided.
Vermont clock⏱ VT AG >14 bday7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_a05cfff06f59dab4Vermont State AGfiled 2023-11-10Candidate
- bd_d215a2dd9929411eVermont State AGfiled 2023-11-10Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-11-10-nextprotocol-capital-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 10, 2023
- Raw hash
- 42de66257cd314cc9043194082e3b2d9f88f5cb00fb8db782e6dd4c43f4054c2
Reporting entity
- Name
- GFS NextProtocol GP, LLCnorm: gfs nextprotocol gp
Victim entity
- Name
- NextProtocol Capital, LPnorm: nextprotocol capital
Incident
- Discovered
- Sep 23, 2023
- Materiality determined
- Nov 10, 2023
- Notification sent
- Nov 10, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPII
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- supply_chain
Compliance
- Time to disclose
- 7 weeks(48 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.