HackingCustomer Data InvolvedData ExfiltratedDelayed DiscoveryIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSPCIMedium
Museum of the American Revolution
bd_358dec0b8792c92e · schema v1 · pii pii-v1
Full breach record for Museum of the American Revolution →The Museum of the American Revolution experienced an external system breach (hacking) between September 22, 2020, and October 13, 2020. The breach was discovered on February 25, 2021, and affected 1,436 individuals. The compromised information included names combined with financial account or credit/debit card numbers and their associated security codes or PINs. Affected individuals were notified on March 10, 2021, and offered 12 months of credit monitoring services.
Maine clockDiscovered Feb 25, 2021 → Filed with AG Mar 10, 202113d ✓ ME AG ≤30d13 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_4ee258b43c89828dMontana State AGfiled 2021-03-10Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ef729f35-e9b1-4f29-a931-7718f545e6ab.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 10, 2021
- Raw hash
- 83da8a321b16849e93b00c3d6b3e243c94424230a580fb13feac58aa0a0e92ba
Reporting entity
- Name
- Museum of the American Revolutionnorm: museum of the american revolution
Victim entity
- Name
- Museum of the American Revolutionnorm: museum of the american revolution
- Industry
- Education
Incident
- Discovered
- Feb 25, 2021
- Materiality determined
- —
- Notification sent
- Mar 10, 2021
- Affected individuals
- 1,436
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSPCI
- Attack vector
- Unauthorized Access
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 13 days(13 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 13d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 25, 2021→ Filed with AG: Mar 10, 202113d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.