HackingStolen CredentialsCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Goody Clancy & Associates, Inc.
bd_4fa886bd098e4957 · schema v1 · pii pii-v1
Full breach record for Goody Clancy & Associates, Inc. →Goody Clancy & Associates, Inc. reported a cybersecurity incident to the Maine Attorney General. On June 30, 2020, an unauthorized individual accessed a single Goody Clancy email account. The breach affected 281 individuals, including 2 Maine residents. The unauthorized access resulted in the acquisition of names and Social Security Numbers. Goody Clancy notified affected individuals on November 4, 2020, and provided two years of credit monitoring through TransUnion Interactive.
Maine clockDiscovered Oct 23, 2020 → Filed with AG Nov 3, 202011d ✓ ME AG ≤30d11 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed281 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0cce754b-2f35-482b-834d-fac7e6f6b69b.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 3, 2020
- Raw hash
- 8c8110f3b8487886515bbeabc911230e26ea0c3b555dfbc41d32c1ffe8b9064b
Reporting entity
- Name
- Goody Clancy & Associates, Inc.norm: goody clancy associates
Victim entity
- Name
- Goody Clancy & Associates, Inc.norm: goody clancy associates
Incident
- Discovered
- Oct 23, 2020
- Materiality determined
- —
- Notification sent
- Nov 4, 2020
- Affected individuals
- 281
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 11 days(11 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 11d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 23, 2020→ Filed with AG: Nov 3, 202011d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.