HackingCustomer Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTPIICriticalContained
GERSON LEHRMAN GROUP, INC.
bd_40f515c14974b085 · schema v1 · pii pii-v1
Full breach record for GERSON LEHRMAN GROUP, INC. →Gerson Lehrman Group, Inc. reported an external system breach that occurred on November 12, 2023, and was discovered on February 5, 2024. The breach affected 152,621 individuals, compromising their names and Social Security numbers. Gerson Lehrman Group began notifying the impacted individuals on March 12, 2024, and offered 12 months of identity monitoring services.
Maine clockDiscovered Feb 5, 2024 → Filed with AG Mar 12, 202436d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_30321db2548f181fOregon State AGfiled 2024-03-12Candidate
- bd_690a00405f09498bCalifornia State AGfiled 2024-03-12Verified
- bd_6a5c413bc2a8a110Montana State AGfiled 2024-03-12Verified by operator
- bd_8477b7863a376585Vermont State AGfiled 2024-03-12Verified
Show 2 more filings ↓Show fewer ↑
- bd_956c9ae2eb034ab4New Hampshire State AGfiled 2024-03-12Verified
- bd_a6d110a2d0e02830Washington State AGfiled 2024-03-12Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/33265961-07d6-49e1-ab43-fa17ca9da3b0.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 12, 2024
- Raw hash
- 714cb57ee1e13089ec41493719f5bc53ea2cc37612ff7b2e66738a31f892d36c
Reporting entity
- Name
- GERSON LEHRMAN GROUP, INC.norm: gerson lehrman
Victim entity
- Name
- GERSON LEHRMAN GROUP, INC.norm: gerson lehrman
Incident
- Discovered
- Feb 5, 2024
- Materiality determined
- —
- Notification sent
- Mar 12, 2024
- Affected individuals
- 152,621
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPII
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 5 weeks(36 days from discovery to filing)
- Compliance flags
- ME AG >30d · 36d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 5, 2024→ Filed with AG: Mar 12, 202436d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.