HackingSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLow
THE NEW-YORK HISTORICAL SOCIETY
bd_2b08d9100a939f76 · schema v1 · pii pii-v1
Full breach record for THE NEW-YORK HISTORICAL SOCIETY →The New-York Historical Society, a non-profit organization, reported a security breach affecting 1,534 individuals, including 4 Maine residents. The breach, which occurred on May 20, 2020, and was discovered on August 21, 2020, was attributed to an event at a third-party provider. The compromised information included names combined with financial account numbers or credit/debit card numbers along with their security codes, access codes, passwords, or PINs. Consumers were notified in writing on September 18, 2020. Identity theft protection services were not offered.
Maine clockDiscovered Aug 21, 2020 → Filed with AG Sep 18, 202028d ✓ ME AG ≤30d28 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/6da3c696-df0e-4f26-966f-afaeaac4e9ef.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 18, 2020
- Raw hash
- 3432800ac54b6b47f48c0397191c4c5cd4403ff2b1c78c66f872d9d88d5ea882
Reporting entity
- Name
- THE NEW-YORK HISTORICAL SOCIETYnorm: the new york historical society
Victim entity
- Name
- THE NEW-YORK HISTORICAL SOCIETYnorm: the new york historical society
Incident
- Discovered
- Aug 21, 2020
- Materiality determined
- —
- Notification sent
- Sep 18, 2020
- Affected individuals
- 4
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Third-Party / Supply Chain
- Threat actor
- Partner
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 28d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 21, 2020→ Filed with AG: Sep 18, 202028d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.