Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Tandym Group, LLC
bd_f882cd7d30af816b · schema v1 · pii pii-v1
Full breach record for Tandym Group, LLC →Tandym Group, LLC notified consumers of a data breach where an unauthorized individual accessed an employee's email account and the iSolved system on May 18, 2023. The incident involved the exposure of names and Social Security numbers. Tandym engaged cybersecurity specialists, enhanced security policies, and offered 12 months of credit monitoring and fraud assistance.
Vermont clock✗ VT AG >45 bday44 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_2b78dc376e774896Montana State AGfiled 2024-04-05Candidate
- bd_b967e0d961dfefefNew Hampshire State AGfiled 2024-04-05Verified
- bd_edcdbfa14b6decdfIndiana State AGfiled 2024-04-05Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-04-05-tandym-group-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 5, 2024
- Raw hash
- 5d120f327ca9a18a98c3b72079a734b964c8eb49bd875ceab7cca61e59517937
Reporting entity
- Name
- Tandym Group, LLCnorm: tandym group
Victim entity
- Name
- Tandym Group, LLCnorm: tandym group
Incident
- Discovered
- May 30, 2023
- Materiality determined
- Apr 5, 2024
- Notification sent
- Apr 5, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- ExternalFinancial
- Initial access
- phishing_link
Compliance
- Time to disclose
- 44 weeks(311 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.