HackingStolen CredentialsTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Toth Financial Advisory Corporation
bd_fd62eeb682c285ff · schema v1 · pii pii-v1
Full breach record for Toth Financial Advisory Corporation →Toth Financial Advisory Corporation notified consumers of a data breach involving unauthorized access to systems between July 27-31, 2023. The incident exposed names, Social Security numbers, and financial account information. The company secured its environment, notified law enforcement, and offered 24 months of credit monitoring. No evidence of misuse was found.
Vermont clock⏱ VT AG >14 bday7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-09-21-toth-financial-advisory-corporation-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 21, 2023
- Raw hash
- 3aefdb1bdc5223eed985f8d6a66d0f0c3e8360a9184280ba326c3869399db214
Reporting entity
- Name
- Toth Financial Advisory Corporationnorm: toth financial advisory
- Domain
- tothfinancial.com
Victim entity
- Name
- Toth Financial Advisory Corporationnorm: toth financial advisory
- Domain
- tothfinancial.com
Incident
- Discovered
- Jul 31, 2023
- Materiality determined
- —
- Notification sent
- Sep 21, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 7 weeks(52 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.