HackingGovernmentGovernmentCustomer Data InvolvedData ExfiltratedDelayed DiscoveryIdentity (basic)Government IDHighResolved

Rock County Human Services Department

bd_4e2c1eafed0f07bd · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 14, 2022

Filed

Sep 21, 2022

To disclose

14 weeks

Affected · nationwide

25,6101 in this filing

Linked

3 filings

Confidence

65%

Full breach record for Rock County Human Services Department →

Rock County Human Services Department, a government entity, experienced an external system breach (hacking) on February 28, 2022, which was discovered on June 14, 2022. The breach affected 25,610 individuals, exposing their names and Social Security numbers. The organization began notifying affected individuals on September 13, 2022, and offered 12 months of identity theft protection services through Experian.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jun 14, 2022 → Filed with AG Sep 21, 202299d ✗ ME AG >90d14 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 106 days

discovery → filing · 14 weeks / 99 days

Feb 28, 2022

Begins

Jun 14, 2022

Discovered

Sep 21, 2022

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_a05bbeaa6ed163c02022-09-12 · +9dCandidate
HHS OCRbd_6e02c59920bac33c2022-08-12 · +40dCandidate

Name: Rock County Human Services Department
norm: rock county human services department

Name: Rock County Human Services Department
norm: rock county human services department
Industry: Governmentllm

Discovered: Jun 14, 2022
Breach occurred: Feb 28, 2022
Undetected for: 106 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 13, 2022
Affected individuals: 25,610state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access

During the incident: Sent written notification to affected individuals.
Offered identity theft protection services.
Changes made: Offered 12 months of identity theft protection services through Experian.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(99 days from discovery to filing)
Compliance flags: ME AG >90d · 99dME resident >60d · 91d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jun 14, 2022
→ Filed with AG: Sep 21, 2022
99d 90 days ME AG >90d
Maine
Discovered: Jun 14, 2022
→ Notified: Sep 13, 2022
91d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jun 14, 2022 → Filed with AG: Sep 21, 2022	99d	90 days	ME AG >90d
Maine	Discovered: Jun 14, 2022 → Notified: Sep 13, 2022	91d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

HHS OCRAug 12 · first

Montana State AG+31d

Maine State AG+40d · this page

Pattern: first filing Aug 12 (WI), last Sep 21 (ME) — a 40-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e3b5cd5a-09ad-4c62-903d-01d1a6fd2c46.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 21, 2022
Raw hash: aaf00ea53c2b7c7b891063d07ee5d0134bb4b44c7dd00b730b278ea127183e33

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityRock County Human Services Department

Victim entityRock County Human Services Department

Incidentdiscovered Jun 14, 2022

Stated responseSent written notification to affected individuals.

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov