Homeless Prevention Center

The Vermont Attorney General's Office was notified by the Homeless Prevention Center of a cybersecurity incident involving their email system on March 26, 2025. The incident, which occurred on March 7, 2025, involved a phishing attack that compromised staff email accounts, potentially exposing personally identifiable information (PII) of individuals, including names, addresses, emails, phone numbers, and social security numbers. The organization has offered free credit monitoring and identity theft protection services for one year to affected individuals.

Source: https://ago.vermont.gov/document/2025-03-26-homeless-prevention-center-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/homeless-prevention-council

"id": "hom453072625",
"linkid": "homeless-prevention-council",
"type": "Breach",
"date": "3/2025",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Social Services',
                        'location': 'Vermont',
                        'name': 'Homeless Prevention Center',
                        'type': 'Non-Profit Organization'}],
 'attack_vector': 'Email',
 'data_breach': {'personally_identifiable_information': ['Names',
                                                         'Addresses',
                                                         'Emails',
                                                         'Phone Numbers',
                                                         'Social Security '
                                                         'Numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['PII']},
 'date_detected': '2025-03-26',
 'description': 'A phishing attack compromised staff email accounts, '
                'potentially exposing personally identifiable information '
                '(PII) of individuals, including names, addresses, emails, '
                'phone numbers, and social security numbers.',
 'impact': {'data_compromised': ['Names',
                                 'Addresses',
                                 'Emails',
                                 'Phone Numbers',
                                 'Social Security Numbers'],
            'identity_theft_risk': 'High',
            'systems_affected': 'Email System'},
 'initial_access_broker': {'entry_point': 'Email'},
 'references': [{'date_accessed': '2025-03-26',
                 'source': "Vermont Attorney General's Office"}],
 'response': {'law_enforcement_notified': 'Yes',
              'remediation_measures': ['Free credit monitoring and identity '
                                       'theft protection services for one '
                                       'year']},
 'title': 'Phishing Attack on Homeless Prevention Center',
 'type': 'Phishing Attack',
 'vulnerability_exploited': 'Human Error'}