MalwareRansomwareData ExfiltratedTargetedPIIIDENTITY_BASICLowContained
Smith Brothers Insurance LLC
bd_fee15abdbc93daf9 · schema v1 · pii pii-v1
Full breach record for Smith Brothers Insurance LLC →Smith Brothers Insurance LLC notified Vermont AG on 2023-07-03 regarding a data security incident discovered on 2022-08-18. Malware was detected on systems, leading to unauthorized access to personal information including names. The company engaged independent cybersecurity experts, notified the FBI, and offered complimentary credit monitoring services to affected individuals.
Vermont clock✗ VT AG >45 bday46 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_d0ff95793983cfc3New Hampshire State AGfiled 2023-07-03Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-07-03-smith-brothers-insurance-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 3, 2023
- Raw hash
- 41a2764ae2c85bcdf7a30f550914328709acb42df081a82ed94a77148b64b30d
Reporting entity
- Name
- Smith Brothers Insurance LLCnorm: smith brothers insurance
Victim entity
- Name
- Smith Brothers Insurance LLCnorm: smith brothers insurance
Incident
- Discovered
- Aug 18, 2022
- Materiality determined
- Jun 27, 2023
- Notification sent
- Jul 3, 2023
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the Federal Bureau of Investigation
Compliance
- Time to disclose
- 46 weeks(319 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.