HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
DocketWise
bd_db21719c17d2f149 · schema v1 · pii pii-v1
Full breach record for DocketWise →DocketWise notified the Vermont AG of a data security incident in October 2025 where unauthorized actors used valid credentials to clone third-party partner repositories. The incident affected 34 Vermont residents, exposing names, addresses, SSNs, and government IDs. DocketWise engaged forensic experts, notified the FBI, and offered 24 months of credit monitoring.
Vermont clock✗ VT AG >45 bday26 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 9 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- bd_14c2b0dfc72d503eWashington State AGfiled 2026-04-03Candidate
- bd_19d49447e198e5e8New Hampshire State AGfiled 2026-04-03Verified
- bd_270698bf44ac9aafMaine State AGfiled 2026-04-03Verified
- bd_e285f2bea7e3adc5Indiana State AGfiled 2026-04-03Verified by operator
Show 4 more filings ↓Show fewer ↑up to 49d gap
- bd_f56df3950ca029eeCalifornia State AGfiled 2026-04-03Verified by operator
- bd_40e1c71041a9a978New Hampshire State AGfiled 2026-05-01(28d gap)Verified
- bd_b7206884fd165144California State AGfiled 2026-05-01(28d gap)Verified by operator
- bd_1f933422ef9106ceMaine State AGfiled 2026-05-22(49d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-04-03-docketwise-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 3, 2026
- Raw hash
- 78a3c854b643ca711c2cc1ff7977330074fc5468e3031e2092603d16d9878885
Reporting entity
- Name
- GOODWIN PROCTER LLPnorm: goodwin procter
- Domain
- goodwinlaw.com
Victim entity
- Name
- DocketWisenorm: docketwise
- Domain
- app.docketwise.com
Incident
- Discovered
- Oct 1, 2025
- Materiality determined
- Apr 3, 2026
- Notification sent
- Apr 3, 2026
- Affected individuals
- 34
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Notified the Office of the Vermont Attorney GeneralNotified the Federal Bureau of Investigation ("FBI")
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 26 weeks(184 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.