HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
A New Leaf, Inc.
bd_2c7c091fe98f2686 · schema v1 · pii pii-v1
Full breach record for A New Leaf, Inc. →A New Leaf, Inc. reported an external system breach (hacking) occurring on March 30, 2021. The incident compromised names and Social Security Numbers of approximately 17,150 individuals, including one Maine resident. The organization notified affected individuals in writing on December 30, 2021, and provided 12 months of credit monitoring through Experian.
Maine clockDiscovered Mar 30, 2021 → Filed with AG Dec 30, 2021275d ✗ ME AG >90d39 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_06f4302a57cf9dd8HHS OCRfiled 2021-12-30Verified
- bd_b6f649de0381726eMontana State AGfiled 2021-12-30Verified
- bd_9293db60da31e5e3New Hampshire State AGfiled 2022-01-03(4d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b4c80dfe-c367-43ed-8f25-7fab46e8eab2.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 30, 2021
- Raw hash
- b510941cef118502cf1364e96ea6d63fe053775445a65dbc166905b76a01892f
Reporting entity
- Name
- A New Leaf, Inc.norm: a new leaf
Victim entity
- Name
- A New Leaf, Inc.norm: a new leaf
Incident
- Discovered
- Mar 30, 2021
- Materiality determined
- —
- Notification sent
- Dec 30, 2021
- Affected individuals
- 17,150
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 39 weeks(275 days from discovery to filing)
- Compliance flags
- ME AG >90d · 275dME resident >180d · 275d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 30, 2021→ Filed with AG: Dec 30, 2021275d 90 days ME AG >90d Maine Discovered: Mar 30, 2021→ Notified: Dec 30, 2021275d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.