MisusePrivilege AbuseData MishandlingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPIIHighResolved
Sentry Insurance
bd_3429f961ed8bfc7c · schema v1 · pii pii-v1
Full breach record for Sentry Insurance →A remote employee of Sentry Insurance permitted a household member to access electronic customer information over a period of several months. The incident, which occurred between October 14, 2020, and January 29, 2021, was discovered on the end date of the occurrence. The unauthorized access potentially exposed personal information for 3,146 individuals, including names, driver's license numbers, dates of birth, and, for a small subset, financial account numbers. In response, Sentry increased monitoring of its remote employees.
Maine clockDiscovered Jan 29, 2021 → Filed with AG Mar 2, 202132d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3,146 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f8a412cf-6167-4ad3-aa9d-b5ecea68306d.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 2, 2021
- Raw hash
- 601967929b692a76a4436aedd5fe6281c741841a544032e5fb0c602eb234f2b6
Reporting entity
- Name
- Sentry Insurancenorm: sentry insurance
Victim entity
- Name
- Sentry Insurancenorm: sentry insurance
Incident
- Discovered
- Jan 29, 2021
- Materiality determined
- —
- Notification sent
- Mar 5, 2021
- Affected individuals
- 3,146
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPII
- Attack vector
- Insider
- Threat actor
- Internal
- Initial access
- insider_action
Compliance
- Time to disclose
- 5 weeks(32 days from discovery to filing)
- Compliance flags
- ME AG >30d · 32d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 29, 2021→ Filed with AG: Mar 2, 202132d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.