HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)IDENTITY_BASICIDENTITY_GOVERNMENTHighContained
NTT DATA Americas, Inc. on behalf of PBI Research Services
bd_4546a76555186a09 · schema v1 · pii pii-v1
Full breach record for NTT DATA Americas, Inc. on behalf of PBI Research Services →NTT DATA Americas, Inc., on behalf of PBI Research Services, reported an external system breach that occurred from May 29 to May 30, 2023. The breach was discovered on July 21, 2023, and affected 1,769 Maine residents. The compromised information includes names and Social Security numbers. Affected individuals were notified on August 25, 2023, and offered one year of credit monitoring and identity theft protection services from Kroll.
Maine clockDiscovered Jul 21, 2023 → Filed with AG Aug 24, 202334d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_44f7fcad12355995Washington State AGfiled 2023-08-24Candidate
- bd_8d5e920778a6cf4eOregon State AGfiled 2023-08-24Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/fe8c6b53-1666-48b7-b040-07a24836275e.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 24, 2023
- Raw hash
- dc1574cbe213429bc6b04914acaece2a6593f85dbdf8741288b574236e923790
Reporting entity
- Name
- NTT DATA Americas, Inc. on behalf of PBI Research Servicesnorm: ntt data americas inc on behalf of pbi research
Victim entity
- Name
- NTT DATA Americas, Inc. on behalf of PBI Research Servicesnorm: ntt data americas inc on behalf of pbi research
Incident
- Discovered
- Jul 21, 2023
- Materiality determined
- —
- Notification sent
- Aug 25, 2023
- Affected individuals
- 1,769
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
Compliance
- Time to disclose
- 5 weeks(34 days from discovery to filing)
- Compliance flags
- ME AG >30d · 34d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 21, 2023→ Filed with AG: Aug 24, 202334d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.