Smyser Kaplan & Veselka

The Vermont Office of the Attorney General disclosed a **data breach** targeting **Smyser Kaplan & Veselka**, a law firm, on **June 5, 2023**. The incident stemmed from **unauthorized access** to the firm’s systems, first detected around **September 26, 2022**. While the exact scope remains unclear, the breach exposed **individuals' names and unspecified personal information**, though the full extent of compromised data was not detailed. The firm responded by offering **complimentary credit monitoring services** to affected parties, suggesting potential risks of identity theft or financial fraud. The delay between the breach discovery and public notification (over **eight months**) raises concerns about data protection protocols. No evidence was provided regarding the exploitation of the stolen data, but the exposure of sensitive client information—particularly in a legal context—poses reputational and compliance risks for the firm.

Source: https://ago.vermont.gov/document/2023-06-05-smyser-kaplan-veselka-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/smyser-kaplan-&-veselka-l-l-p-

"id": "smy950091725",
"linkid": "smyser-kaplan-&-veselka-l-l-p-",
"type": "Breach",
"date": "9/2022",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 'Unknown',
                        'name': 'Smyser Kaplan & Veselka',
                        'type': 'Organization'}],
 'attack_vector': 'Unauthorized Access',
 'customer_advisories': 'Complimentary credit monitoring services offered',
 'data_breach': {'number_of_records_exposed': 'Unknown',
                 'personally_identifiable_information': 'Yes (Names)',
                 'type_of_data_compromised': ['Names',
                                              'Unspecified Information']},
 'date_publicly_disclosed': '2023-06-05',
 'description': 'The Vermont Office of the Attorney General reported a data '
                'breach involving Smyser Kaplan & Veselka. The breach was '
                'caused by unauthorized access on or around September 26, '
                "2022, potentially affecting an unknown number of individuals' "
                'names and other unspecified information. Affected individuals '
                'were offered complimentary credit monitoring services.',
 'impact': {'data_compromised': ['Names', 'Unspecified Information'],
            'identity_theft_risk': 'Potential (credit monitoring offered)'},
 'references': [{'date_accessed': '2023-06-05',
                 'source': 'Vermont Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Reported to Vermont '
                                                       'Office of the Attorney '
                                                       'General'},
 'response': {'recovery_measures': 'Complimentary credit monitoring services '
                                   'offered to affected individuals'},
 'title': 'Data Breach at Smyser Kaplan & Veselka',
 'type': 'Data Breach'}