MalwareRansomwareData EncryptedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Massachusetts Continuing Legal Education, Inc.
bd_3e3fa0a050fa22d0 · schema v1 · pii pii-v1
Full breach record for Massachusetts Continuing Legal Education, Inc. →Massachusetts Continuing Legal Education, Inc. (MCLE) reported a ransomware incident discovered on March 20, 2021. Forensic experts later determined unauthorized parties accessed PII including SSNs. 212 individuals were affected. MCLE notified consumers on July 22, 2021, and provided 24 months of Experian IdentityWorks.
Maine clockDiscovered Mar 20, 2021 → Filed with AG Jul 19, 2021121d ✗ ME AG >90d17 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed212 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ca38a3a0-aaaf-48de-8a23-2d4550b183a9.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 19, 2021
- Raw hash
- 5de674e0fd01787873a32569b9693be724198375160025c3669558580f04be93
Reporting entity
- Name
- Massachusetts Continuing Legal Education, Inc.norm: massachusetts continuing legal education
- Domain
- mcle.org
Victim entity
- Name
- Massachusetts Continuing Legal Education, Inc.norm: massachusetts continuing legal education
- Domain
- mcle.org
Incident
- Discovered
- Mar 20, 2021
- Materiality determined
- —
- Notification sent
- Jul 22, 2021
- Affected individuals
- 212
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notice with Maine Attorney General
Compliance
- Time to disclose
- 17 weeks(121 days from discovery to filing)
- Compliance flags
- ME AG >90d · 121dME resident >60d · 124d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 20, 2021→ Filed with AG: Jul 19, 2021121d 90 days ME AG >90d Maine Discovered: Mar 20, 2021→ Notified: Jul 22, 2021124d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.