The Vermont Office of the Attorney General disclosed that Peregrine Group, LLC suffered an unauthorized intrusion into its computer network between May 1 and 3, 2024, where certain files were potentially copied by an unknown actor. The breach was formally reported on July 12, 2024, but critical details such as the number of affected individuals and the specific types of compromised data remain undisclosed. The lack of clarity on whether the exposed files contained sensitive personal, financial, or employee data leaves the full scope of the incident ambiguous. However, the confirmed unauthorized access and exfiltration attempt suggests a deliberate cyber intrusion, raising concerns about potential data misuse, reputational harm, or downstream fraud risks depending on the nature of the accessed files. The delayed notification (over two months after the breach) further complicates mitigation efforts and public trust.
Source: https://ago.vermont.gov/document/2024-07-12-peregrine-group-data-breach-notice-consumers
TPRM report: https://www.rankiteo.com/company/peregrine-group-llc
"id": "per556091725",
"linkid": "peregrine-group-llc",
"type": "Breach",
"date": "5/2024",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
{'affected_entities': [{'location': 'Vermont, USA',
'name': 'Peregrine Group, LLC',
'type': 'Private Company'}],
'data_breach': {'data_exfiltration': 'Potential (files copied between May '
'1–3, 2024)'},
'date_publicly_disclosed': '2024-07-12',
'description': 'The Vermont Office of the Attorney General reported that '
'Peregrine Group, LLC experienced unauthorized access to its '
'computer network, with certain files potentially copied '
'between May 1 and 3, 2024. The breach notification was '
'reported on July 12, 2024, but the number of individuals '
'affected and specific types of information compromised are '
'unknown.',
'impact': {'systems_affected': ['Computer Network']},
'investigation_status': 'Ongoing (details unknown)',
'references': [{'date_accessed': '2024-07-12',
'source': 'Vermont Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['Vermont Office of the '
'Attorney General']},
'title': 'Unauthorized Access to Peregrine Group, LLC Computer Network',
'type': 'Unauthorized Access / Data Breach'}