The May Institute, Inc.
bd_24be293e36e71d44 · schema v1 · pii pii-v1
Full breach record for The May Institute, Inc. →12 incidents on fileThe May Institute notified consumers of a cybersecurity incident where unauthorized actors accessed files containing PII and PHI (names, SSNs, DOBs, driver's licenses, medical claims, and clinical information) starting December 5, 2023. The incident was discovered on December 14, 2023. The organization engaged in investigation, secured systems, notified federal law enforcement, and offered credit monitoring services.
J jump to incidentP pin to compareR raw source
Incident timeline
Dec 5, 2023
Begins
Dec 14, 2023
Discovered
May 7, 2024
Filed
vs. sector median
+12 wks slower
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- Maine State AGbd_137142407e3cac512024-05-07Verified
- New Hampshire State AGbd_5207e8054ff815ef2024-05-07Verified
- California State AGbd_d04a26b2741bc21c2024-05-07Verified
- New Hampshire State AGbd_266c7d36ba41aac32024-04-01 · +36dVerified
Show 3 more filings ↓Show fewer ↑up to 36d gap
- Indiana State AGbd_741bdbdf65f0748b2024-04-01 · +36dVerified
- Vermont State AGbd_b84a1b378974faf32024-04-01 · +36dVerified
- Maine State AGbd_c36bf0a5f44719802024-04-01 · +36dCandidate
Filing propagation · 8 filings · 5 states
View merged incident ↗Pattern: first filing Apr 1 (NH), last May 7 (VT) — a 36-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.