MisusePrivilege AbuseEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIALMediumActive
WinnResidential
bd_fb2b40235bcef502 · schema v1 · pii pii-v1
Full breach record for WinnResidential →WinnResidential notified Vermont AG that an employee had unauthorized access to resident personal information, including names, addresses, birth certificates, SSNs, and income data. Incident discovered Feb 28, 2024. Company is working with police and offering 12 months of credit monitoring.
Vermont clock⏱ VT AG >14 bday21 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-03-20-winnresidential-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 20, 2024
- Raw hash
- daa67c6a89f3b7a6c0348faa18a5a6ed1c945e757ca55b783910576dff5dc2b9
Reporting entity
- Name
- WinnCompaniesnorm: winncompanies
- Domain
- winncompanies.com
- Industry
- Real Estate
Victim entity
- Name
- WinnResidentialnorm: winnresidential
- Domain
- winncompanies.com
- Industry
- Real Estate
Incident
- Discovered
- Feb 28, 2024
- Materiality determined
- —
- Notification sent
- Mar 20, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL
- Attack vector
- Insider
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- Internal
- Initial access
- insider_action
Compliance
- Time to disclose
- 21 days(21 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.