HackingStolen CredentialsTargetedPIIIDENTITY_BASICLowContained
Facey Goss & McPhee P.C.
bd_f7d3a745d12141da · schema v1 · pii pii-v1
Full breach record for Facey Goss & McPhee P.C. →Facey Goss & McPhee P.C. notified consumers of a data breach where an unauthorized individual accessed an employee email account between Sept 28 and Oct 4, 2023. The incident was discovered on Feb 14, 2024. Personal information was involved, but no evidence of identity theft was found. The firm engaged external cybersecurity professionals and offered complimentary credit monitoring via Experian IdentityWorks.
Vermont clock⏱ VT AG >14 bday4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_5b1dab218d9c4a2dMontana State AGfiled 2024-03-15Candidate
- bd_f6ae6291be671c50Maine State AGfiled 2024-03-15Verified by operator
- bd_1be50d0075c5a41fNew Hampshire State AGfiled 2024-03-19(4d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-03-15-facey-goss-mcphee-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 15, 2024
- Raw hash
- 3c3c39fed32269ba55d026c3c0894f0191c54d829afbabe28065022c5d938f80
Reporting entity
- Name
- Facey Goss & McPhee P.C.norm: facey goss mcphee
Victim entity
- Name
- Facey Goss & McPhee P.C.norm: facey goss mcphee
Incident
- Discovered
- Feb 14, 2024
- Materiality determined
- —
- Notification sent
- Mar 15, 2024
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.