HackingVulnerability ExploitZero-DayCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumResolved
Nuance Communications, Inc
bd_2d18f75acad25ac9 · schema v1 · pii pii-v1
Full breach record for Nuance Communications, Inc →Nuance Communications, Inc. disclosed a data breach affecting one Maine resident, which occurred from May 28 to May 29, 2023. The breach was discovered on July 10, 2023, and was attributed to a zero-day vulnerability. The compromised data includes Social Security Numbers. Affected individuals were notified on September 22, 2023, and offered a 24-month membership to Equifax’s Credit Watch Gold for identity theft protection.
Maine clockDiscovered Jul 10, 2023 → Filed with AG Sep 15, 202367d ⏱ ME AG >30d10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_42ba23005cabceb8New Hampshire State AGfiled 2023-09-15Verified
- bd_829cc01dc8d0b732California State AGfiled 2023-09-15Verified
- bd_f82949cd77b8e1acMontana State AGfiled 2023-09-15Verified
- bd_119ca48980839f9bDelaware State AGfiled 2023-09-18(3d gap)Verified
Show 2 more filings ↓Show fewer ↑up to 4d gap
- bd_b80d8c8f8a2bace4Delaware State AGfiled 2023-09-18(3d gap)Verified
- bd_61e841c1c6509034Oregon State AGfiled 2023-09-19(4d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/66187ace-3687-41c3-ab65-33363ae1f399.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 15, 2023
- Raw hash
- 5c2a6cf17c567e85ee57f24e1e20021c75275ef1ade4e8601e9bce3e105bba7c
Reporting entity
- Name
- Nuance Communications, Incnorm: nuance communications
Victim entity
- Name
- Nuance Communications, Incnorm: nuance communications
Incident
- Discovered
- Jul 10, 2023
- Materiality determined
- —
- Notification sent
- Sep 22, 2023
- Affected individuals
- 1
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 10 weeks(67 days from discovery to filing)
- Compliance flags
- ME AG >30d · 67dME resident >60d · 74d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 10, 2023→ Filed with AG: Sep 15, 202367d 30 days (soft) ME AG >30d Maine Discovered: Jul 10, 2023→ Notified: Sep 22, 202374d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.