HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedDelayed DiscoveryPIILowContained
Form I-9 Compliance
bd_28932f4137a33d4f · schema v1 · pii pii-v1
Full breach record for Form I-9 Compliance →Form I-9 Compliance, a service provider assisting customers with government-required Form I-9 documents, experienced an external network breach beginning on or about February 5, 2024. The unauthorized access was discovered on April 12, 2024. Affected data included names, addresses, and additional personal information elements. 58 Maine residents were among approximately 96,982 total individuals affected. Experian IdentityWorks credit monitoring (24 months) was offered to affected individuals.
Maine clockDiscovered Apr 12, 2024 → Filed with AG Oct 11, 2024182d ✗ ME AG >90d26 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_b80f1ea48e529308California State AGfiled 2024-10-11Verified
- bd_047033e7a754f082Vermont State AGfiled 2024-10-12(1d gap)Verified
- bd_1338e71db161428eOregon State AGfiled 2024-10-16(5d gap)Verified
- bd_600a2c44a7e82cf6Maine State AGfiled 2024-11-07(27d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/5199a89f-3500-4f2c-8883-2d01de4bc78c.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 11, 2024
- Raw hash
- 0adf9fe603a12e0a801038e2269dbd8189c24a107ace5a59260203fd8ababc98
Reporting entity
- Name
- Form I-9 Compliancenorm: form i 9 compliance
- Industry
- Other Government Entity
Victim entity
- Name
- Form I-9 Compliancenorm: form i 9 compliance
- Industry
- Other Government Entity
- Industry
- Professional Servicesllm
Incident
- Discovered
- Apr 12, 2024
- Materiality determined
- —
- Notification sent
- May 31, 2024
- Affected individuals
- 58
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Reported to law enforcement
Compliance
- Time to disclose
- 26 weeks(182 days from discovery to filing)
- Compliance flags
- ME AG >90d · 182d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 12, 2024→ Filed with AG: Oct 11, 2024182d 90 days ME AG >90d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.