Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLow
New York Legal Assistance Group
bd_364389fe1297993d · schema v1 · pii pii-v1
Full breach record for New York Legal Assistance Group →New York Legal Assistance Group, a non-profit organization, reported a data breach affecting 21,347 individuals, including two residents of Maine. The breach was the result of a phishing email, which occurred between August 15, 2020, and September 24, 2020. The organization discovered the breach on December 11, 2020. The compromised information includes names in combination with financial account numbers or credit/debit card numbers. Affected individuals were notified on January 19, 2021, and offered 12 months of credit and identity monitoring services through TransUnion.
Maine clockDiscovered Dec 11, 2020 → Filed with AG Jan 19, 202139d ⏱ ME AG >30d6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_3da33d258c6241ecMontana State AGfiled 2021-01-19Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/4fab6731-e4d4-43c1-b09a-291bc45f5415.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 19, 2021
- Raw hash
- d05b5810fd99108397145c55eb23c03ef3d88390cab4bb84645ac9b6cb3edf80
Reporting entity
- Name
- New York Legal Assistance Groupnorm: new york legal assistance
Victim entity
- Name
- New York Legal Assistance Groupnorm: new york legal assistance
Incident
- Discovered
- Dec 11, 2020
- Materiality determined
- —
- Notification sent
- Jan 19, 2021
- Affected individuals
- 2
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Phishing
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 6 weeks(39 days from discovery to filing)
- Compliance flags
- ME AG >30d · 39d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 11, 2020→ Filed with AG: Jan 19, 202139d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.