HackingProfessional ServicesProfessional ServicesCapture Stored DataData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTIDENTITY_BASICMediumResolved
Wold Architects and Engineers
bd_3408c55326556eda · schema v1 · pii pii-v1
Full breach record for Wold Architects and Engineers →Wold Architects and Engineers (Saint Paul, MN) discovered unusual activity in its digital environment on April 10, 2024. Investigation confirmed an unauthorized external actor acquired files containing personal information (name, driver's license, SSN, student/military ID, passport number) between April 7–10, 2024. Review concluded April 24, 2024. Two Maine residents were affected out of 2,105 total. Written notice sent June 28, 2024. IDX identity protection services offered for 12 months.
Maine clockDiscovered Apr 10, 2024 → Filed with AG Jun 28, 202479d ⏱ ME AG >30d11 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_fb021add1dbdcb98Montana State AGfiled 2024-06-28Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/7b3c7ce1-59a0-4933-80d8-380421a7d2ee.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 28, 2024
- Raw hash
- 474f717386653b1b29f8ecfe77dea8c2e3565db5467732558895b7130e0e9399
Reporting entity
- Name
- Wold Architects and Engineersnorm: wold architects and engineers
- Industry
- Architecture and Engineering
Victim entity
- Name
- Wold Architects and Engineersnorm: wold architects and engineers
- Industry
- Architecture and Engineering
- Industry
- Professional Servicesllm
Incident
- Discovered
- Apr 10, 2024
- Materiality determined
- —
- Notification sent
- Jun 28, 2024
- Affected individuals
- 2
- Data types
- PIIIDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Maine Attorney General notification submitted June 28, 2024
Compliance
- Time to disclose
- 11 weeks(79 days from discovery to filing)
- Compliance flags
- ME AG >30d · 79dME resident >60d · 79d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 10, 2024→ Filed with AG: Jun 28, 202479d 30 days (soft) ME AG >30d Maine Discovered: Apr 10, 2024→ Notified: Jun 28, 202479d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.