HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
CompSource Mutual Insurance Company
bd_2149415ca9f156c5 · schema v1 · pii pii-v1
Full breach record for CompSource Mutual Insurance Company →CompSource Mutual Insurance Company reported an external system breach (hacking) occurring between July 16 and 19, 2022, discovered on September 29, 2022. The incident affected 3,928 individuals, including 3 Maine residents. Acquired data included names and Social Security Numbers. The company provided written notification and offered 12 months of identity theft protection services via Equifax.
Maine clockDiscovered Sep 29, 2022 → Filed with AG Oct 28, 202229d ✓ ME AG ≤30d29 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_a49a3676cd45e2c0Montana State AGfiled 2022-10-28Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/bdcc2a70-d023-4d98-a28d-88eb12703f68.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 28, 2022
- Raw hash
- 7fa0e4ddc00507b95a5061da3759f0eec1b52e06ed7ed4e88dbc6947569efa89
Reporting entity
- Name
- CompSource Mutual Insurance Companynorm: compsource mutual insurance
- Industry
- Financial Services
Victim entity
- Name
- CompSource Mutual Insurance Companynorm: compsource mutual insurance
- Industry
- Financial Services
Incident
- Discovered
- Sep 29, 2022
- Materiality determined
- —
- Notification sent
- Oct 28, 2022
- Affected individuals
- 3,928
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 29 days(29 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 29d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 29, 2022→ Filed with AG: Oct 28, 202229d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.