HackingStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICLowContained
Health Analytics Practice Group
bd_f5763ecf61276463 · schema v1 · pii pii-v1
Full breach record for Health Analytics Practice Group →Berry, Dunn, McNeil & Parker, LLC notified consumers that its vendor, Health Analytics Practice Group (HAPG), experienced a data breach via its MSP, Reliable Networks. Unauthorized access occurred on or around September 14, 2023. Impacted data included names and addresses. BerryDunn engaged forensic experts, migrated data to secure internal systems, and offered IDX identity protection services.
Vermont clock✗ VT AG >45 bday36 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-05-23-berry-dunn-mcneil-parker-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 23, 2024
- Raw hash
- eca643aef15bdffeb7279f97ccb991fcecdf6d64635bf06d338318ecf529b4ba
Reporting entity
- Name
- Berry, Dunn, McNeil & Parker, LLCnorm: berry dunn mcneil parker
Victim entity
- Name
- Health Analytics Practice Groupnorm: health analytics practice
Incident
- Discovered
- Sep 14, 2023
- Materiality determined
- —
- Notification sent
- Apr 11, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1078 Valid Accounts
- Threat actor
- External
- Initial access
- trusted_relationship
Compliance
- Time to disclose
- 36 weeks(252 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.