The Vermont Office of the Attorney General reported a data breach involving Selman & Company on November 4, 2024. The breach occurred on August 15, 2024, when an unauthorized third party accessed files at a third-party data hosting provider, PAS-SG/PAS Hosting, potentially exposing personal information of plan participants, including the report recipient.
Source: https://ago.vermont.gov/document/2024-11-04-selman-company-data-breach-notice-consumers
TPRM report: https://www.rankiteo.com/company/selman-&-company
"id": "sel1053072625",
"linkid": "selman-&-company",
"type": "Breach",
"date": "8/2024",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
{'affected_entities': [{'name': 'Selman & Company', 'type': 'Company'}],
'attack_vector': 'Unauthorized Access',
'data_breach': {'type_of_data_compromised': 'Personal Information'},
'date_detected': '2024-08-15',
'date_publicly_disclosed': '2024-11-04',
'description': 'The Vermont Office of the Attorney General reported a data '
'breach involving Selman & Company on November 4, 2024. The '
'breach occurred on August 15, 2024, when an unauthorized '
'third party accessed files at a third-party data hosting '
'provider, PAS-SG/PAS Hosting, potentially exposing personal '
'information of plan participants, including the report '
'recipient.',
'impact': {'data_compromised': 'Personal Information of Plan Participants'},
'references': [{'date_accessed': '2024-11-04',
'source': 'Vermont Office of the Attorney General'}],
'threat_actor': 'Unauthorized Third Party',
'title': 'Data Breach at Selman & Company',
'type': 'Data Breach'}