HackingSupply Chain (3P Vendor)Multi-Stage ChainCustomer Data InvolvedData ExfiltratedPIIIDENTITY_GOVERNMENTMediumContained
CONSUMER REPORTS, INC.
bd_2c31fd51845ee8f4 · schema v1 · pii pii-v1
Full breach record for CONSUMER REPORTS, INC. →A third-party vendor of Consumer Reports experienced a data security incident that resulted in the compromise of personal information. The breach, which occurred on May 29, 2023, was discovered on July 24, 2023. The compromised data includes names and Social Security numbers. Affected individuals were notified on August 18, 2023, and offered 12 months of complimentary credit monitoring and identity restoration services through Kroll.
Maine clockDiscovered Jul 24, 2023 → Filed with AG Sep 28, 202366d ⏱ ME AG >30d9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/912a299d-4fcc-4ab7-b85d-7d41a86bcfa6.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 28, 2023
- Raw hash
- 630b3baabb3f3878caeb7e6f29d94e53915902c7591aa027b022dd2197958d14
Reporting entity
- Name
- CONSUMER REPORTS, INC.norm: consumer reports
Victim entity
- Name
- CONSUMER REPORTS, INC.norm: consumer reports
Incident
- Discovered
- Jul 24, 2023
- Materiality determined
- —
- Notification sent
- Aug 18, 2023
- Affected individuals
- 2
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
Compliance
- Time to disclose
- 9 weeks(66 days from discovery to filing)
- Compliance flags
- ME AG >30d · 66d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 24, 2023→ Filed with AG: Sep 28, 202366d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.