HackingCustomer Data InvolvedPIIIDENTITY_BASICLowContained
Expeditus Holdings, LLC
bd_d9a0dcff6e74db49 · schema v1 · pii pii-v1
Full breach record for Expeditus Holdings, LLC →Expeditus Holdings, LLC reported unauthorized access to its network on April 2, 2023. An unknown actor accessed and viewed/downloaded certain information, including names and other personal data. The company reported the incident to federal law enforcement, enhanced security controls, provided employee training, and offered 12 months of complimentary credit monitoring and identity restoration services through Experian to affected individuals.
Vermont clock✗ VT AG >45 bday16 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-07-21-expeditus-holdings-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 21, 2023
- Raw hash
- 4be8a52b20209c648ac1b3db3cf9231bef1294468fb9df7d8b99d1c586b0b7de
Reporting entity
- Name
- Expeditus Holdings, LLCnorm: expeditus holdings
Victim entity
- Name
- Expeditus Holdings, LLCnorm: expeditus holdings
Incident
- Discovered
- Apr 2, 2023
- Materiality determined
- —
- Notification sent
- Jul 21, 2023
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Reported the event to federal law enforcement
Compliance
- Time to disclose
- 16 weeks(110 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.