🍁Vermont State AG
Clustered 4 filings across 4 jurisdictions · filed Jul 22, 2025. View entity profile → Other incidents for this victim →
incident inc_eebb2ef9265f44bd · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
PII · Government ID
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
IN ME NH VT
all State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
Mar 1, 2025
Reported by VERMONT AG, NEW HAMPSHIRE AG filings
Mar 17, 2025 → Mar 22, 2025
When the intrusion reportedly occurred, per the linked filings
Jun 19, 2025
Reported by MAINE AG filing
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Forward, The National Databank for Rheumatic Diseases notified consumers of unauthorized network access between March 17-22, 2025. Suspicious activity was detected in March 2025. Affected data likely included names. The organization engaged third-party cybersecurity specialists, secured its environment, and provided 24 months of free credit monitoring services.
Forward The National Databank for Rheumatic Diseases reported a data breach to the Indiana Attorney General. The breach occurred on 2025-03-17 and was reported on 2025-07-22. 120 Indiana residents were affected.
Affected (this filing): 120
Forward, The National Databank for Rheumatic Diseases notified the NH AG of unauthorized network access between March 17-22, 2025. Suspicious activity was detected in March 2025. Data exposed included names, addresses, and SSNs for 23 NH residents. Forward engaged forensic specialists, provided 24 months of credit monitoring, and implemented additional cybersecurity safeguards.
Affected (this filing): 23
Forward, The National Databank for Rheumatic Diseases, a non-profit based in Wichita, KS, experienced unauthorized access to its network between March 17–22, 2025. The breach was discovered on June 19, 2025. Affected data for Maine residents (38 individuals) includes name, address, and Social Security number. Forward notified affected individuals on July 22, 2025, and offered 24-month credit monitoring via CyberScout/TransUnion.
Affected (this filing): 38