HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTPIIMediumResolved
National Education Association
bd_58e493e9fdba0b7c · schema v1 · pii pii-v1
Full breach record for National Education Association →The National Education Association experienced an external system breach (hacking) on October 1, 2020. The incident compromised the names and Social Security Numbers of 629 individuals, including one Maine resident. The Association notified affected individuals in writing on October 16, 2020, and provided 18 months of credit monitoring through CyberScout.
Maine clockDiscovered Oct 1, 2020 → Filed with AG Oct 19, 202018d ✓ ME AG ≤30d18 days discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_27c0fed81501413dMontana State AGfiled 2020-10-16(3d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/07f7ffcc-796a-4615-8aa5-ee3f5a83f951.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 19, 2020
- Raw hash
- 7b703dc9997fb5006ba5f050c90f65c04529d80db1035bbc98a13a6b39493b3b
Reporting entity
- Name
- National Education Associationnorm: national education
- Domain
- nea.org
Victim entity
- Name
- National Education Associationnorm: national education
- Domain
- nea.org
Incident
- Discovered
- Oct 1, 2020
- Materiality determined
- —
- Notification sent
- Oct 16, 2020
- Affected individuals
- 629
- Data types
- IDENTITY_GOVERNMENTPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 18 days(18 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 18d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 1, 2020→ Filed with AG: Oct 19, 202018d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.