DisclosureLens
HackingGovernment IDHighContained

Carefree of Colorado, a Division of Scott Fetzer Company

bd_52b40a1bbcf88899 · schema v1 · pii pii-v1

Severity

High

Discovered

Jan 18, 2022

Filed

Feb 17, 2022

To disclose

4 weeks

Affected · nationwide

3,6171 in this filing

Confidence

50%
Full breach record for Carefree of Colorado, a Division of Scott Fetzer Company →3 incidents on file

Carefree of Colorado, a division of Scott Fetzer Company, experienced an external system breach on October 6, 2021, which was discovered on January 18, 2022. The breach affected 3,617 individuals, including one resident of Maine. The compromised information includes names and Social Security numbers. In response, the company provided one year of Experian's IdentityWorks credit monitoring and identity theft protection services to the affected individual.

Maine clockDiscovered Jan 18, 2022 → Filed with AG Feb 17, 202230d ✓ ME AG ≤30d4 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 104 days
discovery → filing · 4 weeks / 30 days

Oct 6, 2021

Begins

Jan 18, 2022

Discovered

Feb 17, 2022

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3,617 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.