HackingOtherStolen CredentialsTargetedIdentity (basic)Government IDMediumContained

Child Care Circuit

bd_3ea31801d0ad7ebc · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 2, 2024

Filed

Oct 30, 2024

To disclose

28 days

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Child Care Circuit →

Child Care Circuit, a MA-based non-profit, reported an unauthorized access to employee email accounts between March 15-18, 2024. The breach affected one Maine resident, exposing names and Social Security numbers. Notices were sent on October 30, 2024, offering 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Oct 2, 2024 → Filed with AG Oct 30, 202428d ✓ ME AG ≤30d28 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 201 days

discovery → filing · 28 days

Mar 15, 2024

Begins

Oct 2, 2024

Discovered

Oct 30, 2024

Filed

vs. sector median

4 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_e633ed463af235102024-10-30Verified

Name: Community Day Care Center of Lawrence
norm: community day care center of lawrence

Name: Child Care Circuit
norm: child care circuit
Industry: Otherllm

Discovered: Oct 2, 2024
Breach occurred: Mar 15, 2024 – Mar 18, 2024
Undetected for: 201 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 30, 2024
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Initial access: valid_credentials

During the incident: Began an investigation to determine the full nature and scope of the activity
Began a review of the contents of the accounts
Secured the email accounts, including changing the passwords
Conducted a comprehensive investigation
Reviewing our existing security measures
Changes made: Reviewing our existing security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 days(28 days from discovery to filing)
Compliance flags: ME AG ≤30d · 28d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Oct 2, 2024
→ Filed with AG: Oct 30, 2024
28d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Oct 2, 2024 → Filed with AG: Oct 30, 2024	28d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGOct 30 · first

Maine State AGOct 30 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/5d806c7e-e1d6-43eb-bcaa-2544c0a487b8.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 30, 2024
Raw hash: d53bb83572b23322a2c3f0f471099ee7f8e16adf7575788af30126f948f327ea

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityCommunity Day Care Center of Lawrence

Victim entityChild Care Circuit

Incidentdiscovered Oct 2, 2024

Stated responseBegan an investigation to determine the full nature and scope of the activity

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov