HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
United States Association for UNHCR
bd_1f0a1c27913c8769 · schema v1 · pii pii-v1
Full breach record for United States Association for UNHCR →United States Association for UNHCR, a non-profit organization, reported an external system breach (hacking) occurring on April 23, 2021, discovered on December 2, 2021. The incident compromised the names and Social Security Numbers of 295 individuals, including 2 Maine residents. The organization provided 1 year of credit monitoring and identity theft protection through Equifax to affected individuals.
Maine clockDiscovered Dec 2, 2021 → Filed with AG Dec 27, 202125d ✓ ME AG ≤30d25 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed295 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c14174fe-dc87-4371-a01a-c56eaa8446c7.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 27, 2021
- Raw hash
- d0feeccbbb12b0728a062e07281f50d4d8ef4f94d7f5e60f9dbaf71306a9d7af
Reporting entity
- Name
- United States Association for UNHCRnorm: united states association for unhcr
Victim entity
- Name
- United States Association for UNHCRnorm: united states association for unhcr
Incident
- Discovered
- Dec 2, 2021
- Materiality determined
- —
- Notification sent
- Dec 27, 2021
- Affected individuals
- 295
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 25 days(25 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 25d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 2, 2021→ Filed with AG: Dec 27, 202125d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.