HackingTargetedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
OGLETHORPE ASSOCIATES, LLC
bd_fbe2eaffef3005c6 · schema v1 · pii pii-v1
Full breach record for OGLETHORPE ASSOCIATES, LLC →Oglethorpe, Inc. notified consumers of a data security incident detected on June 6, 2025, where an unauthorized third party accessed its network. The investigation concluded on September 16, 2025, confirming the acquisition of personal information including names, DOBs, driver's license numbers, SSNs, and medical information. Oglethorpe engaged forensic specialists, rebuilt systems, notified the FBI, and is offering 12 months of credit monitoring.
Vermont clock✗ VT AG >45 bday21 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_7f3b1425b5ce139eMontana State AGfiled 2025-10-31Candidate
- bd_ca098a1fc7ae37d0New Hampshire State AGfiled 2025-10-31Verified
- bd_f9d6bfb5448324f1Maine State AGfiled 2025-10-31Verified
- bd_4de498a9d31be438Texas State AGfiled 2025-11-04(4d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-10-31-oglethorpe-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 31, 2025
- Raw hash
- b5ca42d9d088b6fa9896a32829c90eb5581ed8724b131398b7a800d5c5dfa4d7
Reporting entity
- Name
- OGLETHORPE ASSOCIATES, LLCnorm: oglethorpe associates
Victim entity
- Name
- OGLETHORPE ASSOCIATES, LLCnorm: oglethorpe associates
Incident
- Discovered
- Jun 6, 2025
- Materiality determined
- Oct 31, 2025
- Notification sent
- Oct 31, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Notified the FBI and is fully cooperating with their investigation
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 21 weeks(147 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.