HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Vocatura, Spagnuolo & Company
bd_ee038124b3793457 · schema v1 · pii pii-v1
Full breach record for Vocatura, Spagnuolo & Company →Vocatura, Spagnuolo & Company reported unauthorized access to a single email account on July 16, 2025. The incident involved an unknown actor viewing emails without permission. Affected data included names, Social Security numbers, dates of birth, and addresses. Approximately 22 Rhode Island residents were impacted. The firm offered complimentary identity monitoring services and notified affected individuals.
Vermont clock✗ VT AG >45 bday22 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_f77908c7eb823f56Indiana State AGfiled 2025-11-13(34d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-12-17-vocatura-spagnuolo-company-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 17, 2025
- Raw hash
- 45c7579c5c39ce52a153c618f500a284f76f71adc2fb1a367cd7d073b1db074c
Reporting entity
- Name
- Vocatura, Spagnuolo & Company, P.C., CPAsnorm: vocatura spagnuolo company pc cpas
Victim entity
- Name
- Vocatura, Spagnuolo & Companynorm: vocatura spagnuolo
Incident
- Discovered
- Jul 16, 2025
- Materiality determined
- —
- Notification sent
- Dec 17, 2025
- Affected individuals
- 22
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 22 weeks(154 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.