HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICCriticalContained
Indianapolis Housing Agency Inc.
bd_31947650ec10a382 · schema v1 · pii pii-v1
Full breach record for Indianapolis Housing Agency Inc. →Indianapolis Housing Agency reported an external system breach (hacking) occurring on September 23, 2022, discovered on October 4, 2022. The incident affected 212,910 individuals, including 9 Maine residents. Acquired data included names and Social Security Numbers. The agency provided written notification and offered 12 months of credit monitoring and identity theft recovery services through IDX.
Maine clockDiscovered Oct 4, 2022 → Filed with AG Jan 25, 2023113d ✗ ME AG >90d16 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_03b183385c2606c8New Hampshire State AGfiled 2023-01-25Verified
- bd_a5cc1ed89b344fbcMontana State AGfiled 2023-01-25Candidate
- bd_fba4e88bebf161bdMaine State AGfiled 2023-01-25Candidate
- bd_09c333c1cc6841d7Vermont State AGfiled 2023-01-23(2d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ac65cfa3-3f3b-4121-b3e3-aefb4a546849.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 25, 2023
- Raw hash
- 0936562e4dbc8741f91e190b4839caf6d973223a8d034903cfbf4fac4acb574b
Reporting entity
- Name
- Indianapolis Housing Agency Inc.norm: indianapolis housing agency
Victim entity
- Name
- Indianapolis Housing Agency Inc.norm: indianapolis housing agency
Incident
- Discovered
- Oct 4, 2022
- Materiality determined
- —
- Notification sent
- Jan 23, 2023
- Affected individuals
- 212,910
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 16 weeks(113 days from discovery to filing)
- Compliance flags
- ME AG >90d · 113dME resident >60d · 111d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 4, 2022→ Filed with AG: Jan 25, 2023113d 90 days ME AG >90d Maine Discovered: Oct 4, 2022→ Notified: Jan 23, 2023111d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.