HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
HPM Insurance
bd_da336a340bbea818 · schema v1 · pii pii-v1
Full breach record for HPM Insurance →HPM Insurance experienced a cybersecurity incident on October 21, 2024, involving unauthorized access to its network via a vulnerability in a public-facing application. The breach compromised personal information of Vermont residents, including government IDs, names, and financial account numbers. HPM engaged Mandiant for forensic investigation, notified the FBI, and provided credit monitoring services to affected individuals. The incident is currently contained.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-09-09-hpm-insurance-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 9, 2024
- Raw hash
- 524771775a450ec226e29d1dd66750411fdeb7daf38df2c56f54a915f6a25091
Reporting entity
- Name
- HPM Insurancenorm: hpm insurance
Victim entity
- Name
- HPM Insurancenorm: hpm insurance
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- Dec 6, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Vermont Attorney General's Office
- Initial access
- exploit_public_facing
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.