The Vermont Office of the Attorney General disclosed a data breach affecting All Accounted For on October 9, 2024. The incident involved unauthorized access to files between January 2, 2023, and July 26, 2023, potentially exposing personal information, including names of affected individuals. While the exact number of impacted individuals and the full scope of compromised data (e.g., financial records, sensitive identifiers) remain undisclosed, the breach suggests a security lapse allowing external actors to infiltrate systems and access confidential records. The prolonged exposure window (over six months) raises concerns about the extent of data exfiltration and potential misuse. No immediate evidence of fraud or identity theft has been reported, but the lack of clarity on the compromised data types leaves affected parties vulnerable to downstream risks, including phishing or targeted scams. The company has not specified whether the breach stemmed from a cyber attack, insider threat, or unpatched vulnerability, but regulatory scrutiny and mandatory notifications are likely underway.
Source: https://ago.vermont.gov/document/2024-10-09-all-accounted-data-breach-notice-consumers
TPRM report: https://www.rankiteo.com/company/all-accounted-for-ltd
"id": "all551091725",
"linkid": "all-accounted-for-ltd",
"type": "Breach",
"date": "1/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'name': 'All Accounted For'}],
'data_breach': {'personally_identifiable_information': True,
'type_of_data_compromised': ['personal information', 'names']},
'date_publicly_disclosed': '2024-10-09',
'description': 'The Vermont Office of the Attorney General reported a data '
'breach involving All Accounted For on October 9, 2024. The '
'breach, which involved unauthorized access to files between '
'January 2, 2023, and July 26, 2023, potentially affected '
'personal information, including names. The number of '
'individuals affected and specific types of information '
'compromised remains unknown.',
'impact': {'data_compromised': ['names'], 'identity_theft_risk': 'Potential'},
'references': [{'date_accessed': '2024-10-09',
'source': 'Vermont Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['Vermont Office of the '
'Attorney General']},
'title': 'Data Breach at All Accounted For',
'type': 'Data Breach'}