HackingHacking OtherCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHigh
NASCO Industries Inc
bd_27541ee9c5b7e6e7 · schema v1 · pii pii-v1
Full breach record for NASCO Industries Inc →NASCO, a healthcare organization, reported an external system breach (hacking) that occurred on May 30, 2023, and was discovered on August 21, 2023. The breach affected 2,840 Maine residents, compromising their names and Social Security numbers. NASCO notified the affected individuals on October 27, 2023, and offered 24 months of identity monitoring services through Experian.
Leak gap clock✗ Leak >180d10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
A leak claim by dispossessor about this victim predates this filing by 312 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_8c1cb6cf621dcfa2Leak Sitecl0pfiled 2023-07-12(108d gap)Verified by operator
Regulatory filings (3) · sorted by filing gap
- bd_aa31f139773717dfOregon State AGfiled 2023-10-27(1d gap)Verified
- bd_f61696cdfa81c4dfWashington State AGfiled 2023-10-27(1d gap)Verified by operator
- bd_ffb048d919d7530aMontana State AGfiled 2023-10-27(1d gap)Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/9925f2a7-566b-45bb-8b25-cb67ddfb9967.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 28, 2023
- Raw hash
- bc4342bc64a0620b58d871fca2bf7ca82e53d90649ad41164223126ee74ce480
Reporting entity
- Name
- NASCO Industries Incnorm: nasco industries
- Domain
- nasco.com
- Industry
- Healthcare
Victim entity
- Name
- NASCO Industries Incnorm: nasco industries
- Domain
- nasco.com
- Industry
- Healthcare
Incident
- Discovered
- Aug 21, 2023
- Materiality determined
- —
- Notification sent
- Oct 27, 2023
- Affected individuals
- 2,840
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 10 weeks(68 days from discovery to filing)
- Compliance flags
- Leak >180dME AG >30d · 68dME resident >60d · 67d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 21, 2023→ Filed with AG: Oct 28, 202368d 30 days (soft) ME AG >30d Maine Discovered: Aug 21, 2023→ Notified: Oct 27, 202367d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.