DisclosureLens
HackingCustomer Data InvolvedIdentity (basic)Government IDHigh

The Rosewood Corporation

bd_4279715ed4ecdd29 · schema v1 · pii pii-v1

Severity

High

Discovered

Mar 10, 2022

Filed

Aug 21, 2022

To disclose

23 weeks

Affected · nationwide

4,4671 in this filing

Confidence

75%
Full breach record for The Rosewood Corporation2 incidents on file

The Rosewood Corporation reported a data breach affecting one Maine resident. The breach, which occurred on February 16, 2022, and was discovered on March 10, 2022, was an external system breach (hacking). The compromised information includes names combined with driver's license or non-driver identification card numbers. The company offered one year of identity theft protection services from Experian and LibertyID to affected individuals.

Maine clockDiscovered Mar 10, 2022Filed with AG Aug 21, 2022164d ME AG >90d23 weeks discovery → filing
AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 22 days
discovery → filing · 23 weeks / 164 days

Feb 16, 2022

Begins

Mar 10, 2022

Discovered

Aug 21, 2022

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4,467 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.