HackingCustomer Data InvolvedPIIIDENTITY_BASICLowContained
Loretto Management Corporation
bd_f08d881e6c45d43b · schema v1 · pii pii-v1
Full breach record for Loretto Management Corporation →Loretto Management Corporation notified consumers of a data breach occurring May 1-2, 2024. The incident involved unauthorized access to information systems containing personal information (PII). No evidence of fraud or PHI misuse was found. Loretto engaged forensic investigators, secured systems, implemented additional safeguards, and offered complimentary credit monitoring services to affected individuals.
Vermont clock⏱ VT AG >14 bday10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_5ead0c36f95172c4Indiana State AGfiled 2024-07-09Verified
- bd_9945c662ad807909Maine State AGfiled 2024-07-09Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-07-09-loretto-management-corporation-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 9, 2024
- Raw hash
- 04e654337558d27f68f9509bea11f4d13e4535fde7da5c38a90028822ddd5259
Reporting entity
- Name
- Loretto Management Corporationnorm: loretto management
Victim entity
- Name
- Loretto Management Corporationnorm: loretto management
Incident
- Discovered
- May 2, 2024
- Materiality determined
- —
- Notification sent
- Jul 9, 2024
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Filed notice with Vermont Attorney General
Compliance
- Time to disclose
- 10 weeks(68 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.