HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
IDC Research, Inc.
bd_14da7d3102431f02 · schema v1 · pii pii-v1
Full breach record for IDC Research, Inc. →IDC Research, Inc. reported an external system breach (hacking) occurring on February 14, 2022, discovered on February 15, 2022. The incident affected 247 individuals, including 1 Maine resident. Acquired data included names and Social Security Numbers. IDC Research notified affected individuals in writing on April 18, 2022, and offered 24 months of free identity and credit monitoring through Equifax.
Maine clockDiscovered Feb 15, 2022 → Filed with AG Apr 29, 202273d ⏱ ME AG >30d10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_0fbd94b08e522470Montana State AGfiled 2022-04-18(11d gap)Candidate
- bd_ed2354eb4909c999New Hampshire State AGfiled 2022-04-18(11d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/23f66e01-0289-4413-b032-f2316584dbea.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 29, 2022
- Raw hash
- 4ee323db1b367aec8d71224f33aeba0895a15eeef3b4a6cd683d34d2d41fdc47
Reporting entity
- Name
- IDC Research, Inc.norm: idc research
Victim entity
- Name
- IDC Research, Inc.norm: idc research
Incident
- Discovered
- Feb 15, 2022
- Materiality determined
- —
- Notification sent
- Apr 18, 2022
- Affected individuals
- 247
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 10 weeks(73 days from discovery to filing)
- Compliance flags
- ME AG >30d · 73dME resident >60d · 62d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 15, 2022→ Filed with AG: Apr 29, 202273d 30 days (soft) ME AG >30d Maine Discovered: Feb 15, 2022→ Notified: Apr 18, 202262d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.