HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICCriticalContained
Self Insured Plans, LLC
bd_25a5bc689821eccd · schema v1 · pii pii-v1
Full breach record for Self Insured Plans, LLC →90 Degree Benefits, Inc. reported an external system breach (hacking) occurring on 02/24/2022, discovered on 04/21/2022. The incident affected 163,483 individuals nationwide, including 92 Maine residents. Acquired data included names and Social Security Numbers. The entity, represented by attorney Todd Rowe of Lewis Brisbois, provided 12 months of credit and CyberScan monitoring and identity theft recovery services through IDX.
Maine clockDiscovered Apr 21, 2022 → Filed with AG Jun 10, 202250d ⏱ ME AG >30d7 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_55f88b2fe516be05California State AGfiled 2022-06-10Verified
- bd_b3b3f35907927dbdOregon State AGfiled 2022-06-10Verified
- bd_a69585f431ff6887Delaware State AGfiled 2022-06-09(1d gap)Verified
- bd_a6e44b8edc707de0South Carolina State AGfiled 2022-06-09(1d gap)Verified
Show 3 more filings ↓Show fewer ↑up to 50d gap
- bd_cafd8c7f6de047f6HHS OCRfiled 2022-06-09(1d gap)Verified
- bd_04696d915e686bf7Montana State AGfiled 2022-07-18(38d gap)Verified
- bd_d3a948c6afb51a5cDelaware State AGfiled 2022-04-21(50d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/4b4619a6-6c3a-4b4e-b723-3ba32c2f18aa.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 10, 2022
- Raw hash
- 2760b8cbda408b70db9c52261bcb70c5e44782279ffe4f46d0c80818466891ea
Reporting entity
- Name
- Self Insured Plans, LLCnorm: self insured plans
Victim entity
- Name
- Self Insured Plans, LLCnorm: self insured plans
Incident
- Discovered
- Apr 21, 2022
- Materiality determined
- —
- Notification sent
- Jun 9, 2022
- Affected individuals
- 163,483
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 7 weeks(50 days from discovery to filing)
- Compliance flags
- ME AG >30d · 50d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 21, 2022→ Filed with AG: Jun 10, 202250d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.