HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Taro Pharmaceuticals U.S.A., Inc.
bd_436d153ddea7ba6e · schema v1 · pii pii-v1
Full breach record for Taro Pharmaceuticals U.S.A., Inc. →Taro Pharmaceuticals U.S.A., Inc. reported an external system breach (hacking) occurring on March 3, 2023, discovered on March 25, 2023. The incident affected 1,734 individuals, including one Maine resident. Personal information compromised included names and Social Security Numbers. Taro provided written notification on April 19, 2023, and offered 24 months of credit monitoring through TransUnion.
Maine clockDiscovered Mar 25, 2023 → Filed with AG Apr 21, 202327d ✓ ME AG ≤30d27 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,734 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0cdf5581-aaa2-4bd6-90da-a32de4114a97.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 21, 2023
- Raw hash
- 0af472c708ec09c7c1010154563b702b75baede5855816603d5ba5eef4346e72
Reporting entity
- Name
- Taro Pharmaceuticals U.S.A., Inc.norm: taro pharmaceuticals usa
Victim entity
- Name
- Taro Pharmaceuticals U.S.A., Inc.norm: taro pharmaceuticals usa
Incident
- Discovered
- Mar 25, 2023
- Materiality determined
- —
- Notification sent
- Apr 19, 2023
- Affected individuals
- 1,734
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 27 days(27 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 27d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 25, 2023→ Filed with AG: Apr 21, 202327d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.