The Vermont Office of the Attorney General reported on December 13, 2022, that Hartwell Financial Services experienced a security incident involving unauthorized access to an employee's email account on August 12, 2022. The breach may have compromised personal information including names, addresses, dates of birth, driver’s license numbers, financial account numbers, and Social Security numbers, although it is unclear whether individual information was accessed or misused.
Source: https://ago.vermont.gov/document/2022-12-13-hartwell-financial-services-data-breach-notice-consumers
TPRM report: https://www.rankiteo.com/company/hartwell-financial-services
"id": "har523072525",
"linkid": "hartwell-financial-services",
"type": "Breach",
"date": "8/2022",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
{'affected_entities': [{'industry': 'Finance',
'name': 'Hartwell Financial Services',
'type': 'Financial Services'}],
'attack_vector': 'Email Compromise',
'data_breach': {'personally_identifiable_information': ['names',
'addresses',
'dates of birth',
'driver’s license '
'numbers',
'financial account '
'numbers',
'Social Security '
'numbers'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Information']},
'date_detected': '2022-08-12',
'date_publicly_disclosed': '2022-12-13',
'description': "Unauthorized access to an employee's email account at "
'Hartwell Financial Services, potentially compromising '
'personal information.',
'impact': {'data_compromised': ['names',
'addresses',
'dates of birth',
'driver’s license numbers',
'financial account numbers',
'Social Security numbers'],
'systems_affected': ['Email Account']},
'initial_access_broker': {'entry_point': 'Email Account'},
'references': [{'date_accessed': '2022-12-13',
'source': 'Vermont Office of the Attorney General'}],
'title': 'Hartwell Financial Services Email Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'Unauthorized Access'}