HackingData ExfiltratedPIIIDENTITY_GOVERNMENTHighContained
m3 accounting systems
bd_183c99ecdc28dadc · schema v1 · pii pii-v1
Full breach record for m3 accounting systems →M3 Accounting Systems, a Georgia-based commercial entity, reported an external system breach (hacking) occurring on December 6, 2021, discovered on March 14, 2022. The incident compromised the names and Social Security Numbers of 1,789 individuals, including 1 Maine resident. Notification was sent on May 19, 2022, offering credit monitoring and identity theft recovery services through IDX.
Maine clockDiscovered Mar 14, 2022 → Filed with AG May 19, 202266d ⏱ ME AG >30d9 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,789 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c11c707d-cf67-41ba-a332-cf7b5c0f4c9b.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 19, 2022
- Raw hash
- 39a39d5969a668fc5b7856ddbd49771fb39c667eac04fbb682368a021da1df47
Reporting entity
- Name
- m3 accounting systemsnorm: m3 accounting
Victim entity
- Name
- m3 accounting systemsnorm: m3 accounting
Incident
- Discovered
- Mar 14, 2022
- Materiality determined
- —
- Notification sent
- May 19, 2022
- Affected individuals
- 1,789
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 weeks(66 days from discovery to filing)
- Compliance flags
- ME AG >30d · 66dME resident >60d · 66d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 14, 2022→ Filed with AG: May 19, 202266d 30 days (soft) ME AG >30d Maine Discovered: Mar 14, 2022→ Notified: May 19, 202266d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.