HackingData ExfiltratedCustomer Data InvolvedPIIIDENTITY_GOVERNMENTHighContained
UFCW Local 1776 Keystone State
bd_0b5f2ca179f56904 · schema v1 · pii pii-v1
Full breach record for UFCW Local 1776 Keystone State →UFCW Local 1776 reported an external system breach (hacking) occurring on July 14, 2020, discovered on September 11, 2020. The incident compromised the Social Security Numbers of 5,575 individuals, including one Maine resident. The organization provided written notification on January 5, 2021, and offered 12 months of credit monitoring services through IDX.
Maine clockDiscovered Sep 11, 2020 → Filed with AG Jan 6, 2021117d ✗ ME AG >90d17 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed5,575 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/aa0c2823-cbdf-47b1-9d4d-351a16f998f0.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 6, 2021
- Raw hash
- ad5713bebf2cfc01b5a75f0e0a0330c13e976f84b0f3f8ca82ef77265f3fbdad
Reporting entity
- Name
- UFCW Local 1776 Keystone Statenorm: ufcw local 1776 keystone state
- Domain
- ufcw1776.org
Victim entity
- Name
- UFCW Local 1776 Keystone Statenorm: ufcw local 1776 keystone state
- Domain
- ufcw1776.org
Incident
- Discovered
- Sep 11, 2020
- Materiality determined
- —
- Notification sent
- Jan 5, 2021
- Affected individuals
- 5,575
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 17 weeks(117 days from discovery to filing)
- Compliance flags
- ME AG >90d · 117dME resident >60d · 116d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 11, 2020→ Filed with AG: Jan 6, 2021117d 90 days ME AG >90d Maine Discovered: Sep 11, 2020→ Notified: Jan 5, 2021116d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.