HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Spaulding Clinical Research, LLC
bd_1ae4327c7ce057dd · schema v1 · pii pii-v1
Full breach record for Spaulding Clinical Research, LLC →Spaulding Clinical Research, LLC reported a data breach to the Maine Attorney General, indicating that an external system hacking incident occurred on November 8, 2023. The breach, which was discovered the same day, affected one Maine resident. The compromised information included the resident's name and Social Security number. The company began notifying affected individuals on March 1, 2024, and offered identity theft protection services through IDX.
Maine clockDiscovered Nov 8, 2023 → Filed with AG Mar 1, 2024114d ✗ ME AG >90d16 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_acd8bd0caba4d887Indiana State AGfiled 2024-03-01Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/78ee5ae8-8cdf-4fab-bfa3-ce6b9320e6d0.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 1, 2024
- Raw hash
- a452591f86953d0bf93271907de8d97405e1329079e158cca07a1befb3acb817
Reporting entity
- Name
- Spaulding Clinical Research, LLCnorm: spaulding clinical research
Victim entity
- Name
- Spaulding Clinical Research, LLCnorm: spaulding clinical research
Incident
- Discovered
- Nov 8, 2023
- Materiality determined
- —
- Notification sent
- Mar 1, 2024
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 16 weeks(114 days from discovery to filing)
- Compliance flags
- ME AG >90d · 114dME resident >60d · 114d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 8, 2023→ Filed with AG: Mar 1, 2024114d 90 days ME AG >90d Maine Discovered: Nov 8, 2023→ Notified: Mar 1, 2024114d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.