HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Tavistock
bd_19b624dfa6c2ccde · schema v1 · pii pii-v1
Full breach record for Tavistock →Tavistock Corporation reported an external system breach (hacking) on April 6, 2022, affecting 13,239 individuals, including 9 in Maine. The incident compromised names and Social Security Numbers. The company provided written notification and offered 12 months of Kroll Essential Monitoring Services to affected Maine residents.
Maine clockDiscovered Apr 6, 2022 → Filed with AG Oct 3, 2022180d ✗ ME AG >90d26 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
A leak claim by cuba about this victim predates this filing by 174 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_6b53e616f3b2a227Leak Sitecubafiled 2022-04-12(174d gap)Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/02d67fe0-f9c8-458c-8e5e-ea9cefc096b3.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 3, 2022
- Raw hash
- 3681bb4e94aeb80fa125a1be674b4c16d1f45b341d8a56346cff177d6208458d
Reporting entity
- Name
- Tavistocknorm: tavistock
- Domain
- tavistock.com
Victim entity
- Name
- Tavistocknorm: tavistock
- Domain
- tavistock.com
Incident
- Discovered
- Apr 6, 2022
- Materiality determined
- —
- Notification sent
- Sep 29, 2022
- Affected individuals
- 13,239
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General's Office
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 26 weeks(180 days from discovery to filing)
- Compliance flags
- ME AG >90d · 180dME resident >60d · 176dLeak >90d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 6, 2022→ Filed with AG: Oct 3, 2022180d 90 days ME AG >90d Maine Discovered: Apr 6, 2022→ Notified: Sep 29, 2022176d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.