HackingOtherDelayed DiscoveryData ExfiltratedCustomer Data InvolvedPIILowResolved
Conference USA
bd_2bb1ff09b30cacf2 · schema v1 · pii pii-v1
Full breach record for Conference USA →On June 22, 2024, an unauthorized party gained limited access to parts of the Conference USA network and may have accessed and acquired files containing personal information including full names. The breach was not discovered until August 20, 2025 — over 14 months later. A total of 1,459 individuals were affected nationally, including 1 Maine resident. Written notifications were sent September 9, 2025. IDX 12-month identity protection services were offered to affected individuals.
Leak gap clock✗ Leak >180d20 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
A leak claim by payloadbin about this victim predates this filing by 1460 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_5d860a6a22a2b32eLeak Siteabyssfiled 2024-06-22(444d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/5bab1842-0f41-4494-a44f-b21db5f72a49.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 9, 2025
- Raw hash
- d1ef771543cffe65eda21fc7605514346ec2047a2bde49683824801db2171a20
Reporting entity
- Name
- Conference USAnorm: conference usa
- Domain
- conferenceusa.com
- Industry
- Non-Profit
Victim entity
- Name
- Conference USAnorm: conference usa
- Domain
- conferenceusa.com
- Industry
- Non-Profit
- Industry
- Otherllm
Incident
- Discovered
- Aug 20, 2025
- Materiality determined
- —
- Notification sent
- Sep 9, 2025
- Affected individuals
- 1
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 20 days(20 days from discovery to filing)
- Compliance flags
- Leak >180dME AG ≤30d · 20d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 20, 2025→ Filed with AG: Sep 9, 202520d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.