DisclosureLens
HackingHealthcareCustomer Data InvolvedIdentity (basic)Government IDHighResolved

Berkshire Farm Center and Services for Youth

bd_49b1f58baa40e59a · schema v1 · pii pii-v1

Severity

High

Discovered

Jul 16, 2020

Filed

Sep 22, 2020

To disclose

10 weeks

Affected · nationwide

4,9503 in this filing

Linked

3 filings

Confidence

50%
Full breach record for Berkshire Farm Center and Services for Youth →4 incidents on file

Berkshire Farm Center & Services for Youth, Inc. reported a data breach to the Maine Attorney General, stating that an external system breach (hacking) occurred between February 7, 2020, and May 20, 2020. The breach was discovered on July 16, 2020. The incident affected 3 Maine residents and a total of 4,950 individuals. The compromised information included names and Social Security numbers. Affected individuals were notified in writing on September 22, 2020, and were offered 12 months of identity theft protection services through ID Experts.

Maine clockDiscovered Jul 16, 2020 → Filed with AG Sep 22, 202068d ⏱ ME AG >30d10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 160 days
discovery → filing · 10 weeks / 68 days

Feb 7, 2020

Begins

Jul 16, 2020

Discovered

Sep 22, 2020

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 2 states

View merged incident ↗
HHS OCRJul 30 · first
Maine State AG+54d
Maine State AG+54d · this page

Pattern: first filing Jul 30 (NY), last Sep 22 (ME) — a 54-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.