HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICCREDENTIALSLowContained
Evox Therapeutics
bd_e2c413a7a2431a9c · schema v1 · pii pii-v1
Full breach record for Evox Therapeutics →EVOX Productions, LLC reported that an unknown actor accessed an employee email account between June 21 and July 13, 2022. The incident involved unauthorized access via compromised credentials, exposing names and contact information. EVOX reset passwords, secured the tenant, and offered 12 months of credit monitoring to affected individuals.
Vermont clock✗ VT AG >45 bday15 months discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-09-01-evox-productions-dba-evox-images-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 1, 2023
- Raw hash
- 88e241661d699d1775db5aa469cab87c9b10c03109108e0d418a685498a1b8e9
Reporting entity
- Name
- Evox Therapeuticsnorm: evox therapeutics
- Domain
- evoxtherapeutics.com
Victim entity
- Name
- Evox Therapeuticsnorm: evox therapeutics
- Domain
- evoxtherapeutics.com
Incident
- Discovered
- Jun 21, 2022
- Materiality determined
- —
- Notification sent
- Sep 1, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- notifying relevant regulatory authorities
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 15 months(437 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.