HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumResolved
Berkshire Farm Center and Services for Youth
bd_49b1f58baa40e59a · schema v1 · pii pii-v1
Full breach record for Berkshire Farm Center and Services for Youth →Berkshire Farm Center & Services for Youth, Inc. reported a data breach to the Maine Attorney General, stating that an external system breach (hacking) occurred between February 7, 2020, and May 20, 2020. The breach was discovered on July 16, 2020. The incident affected 3 Maine residents and a total of 4,950 individuals. The compromised information included names and Social Security numbers. Affected individuals were notified in writing on September 22, 2020, and were offered 12 months of identity theft protection services through ID Experts.
Maine clockDiscovered Jul 16, 2020 → Filed with AG Sep 22, 202068d ⏱ ME AG >30d10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_d44feca01a30a314Maine State AGfiled 2020-09-22Verified
- bd_c7876b09803d590aHHS OCRfiled 2020-07-30(54d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/4c1d6f6d-a06a-49d0-b1d2-d1fec0245873.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 22, 2020
- Raw hash
- 11d81953f90352a1d12796966ac01d7326d501ca32c5ac8af62c43a2dab1d521
Reporting entity
- Name
- Berkshire Farm Center and Services for Youthnorm: berkshire farm center and services for youth
Victim entity
- Name
- Berkshire Farm Center and Services for Youthnorm: berkshire farm center and services for youth
Incident
- Discovered
- Jul 16, 2020
- Materiality determined
- —
- Notification sent
- Sep 22, 2020
- Affected individuals
- 3
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 10 weeks(68 days from discovery to filing)
- Compliance flags
- ME AG >30d · 68dME resident >60d · 68d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 16, 2020→ Filed with AG: Sep 22, 202068d 30 days (soft) ME AG >30d Maine Discovered: Jul 16, 2020→ Notified: Sep 22, 202068d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.