HackingGovernmentTransportation & LogisticsGovernmentDelayed DiscoveryData ExfiltratedIdentity (basic)Government IDHigh

Regional Transportation Authority of Northeastern Illinois

bd_5b4a81b839af1371 · schema v1 · pii pii-v1

Severity

High

Discovered

Jul 27, 2023

Filed

Aug 14, 2023

To disclose

18 days

Affected · nationwide

2,6291 in this filing

Linked

6 filings

Confidence

65%

Full breach record for Regional Transportation Authority of Northeastern Illinois →

The Regional Transportation Authority of Northeastern Illinois reported an external system breach that occurred on March 1, 2023, and was discovered on July 27, 2023. The incident compromised the names and Social Security numbers of 2,629 individuals. Affected residents were notified on August 14, 2023, and offered 12 months of complimentary credit monitoring and identity restoration services from Experian.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jul 27, 2023 → Filed with AG Aug 14, 202318d ✓ ME AG ≤30d18 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 148 days

discovery → filing · 18 days

Mar 1, 2023

Begins

Jul 27, 2023

Discovered

Aug 14, 2023

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Montana State AGbd_64574ce9cefe16412023-08-14Verified by operator
Indiana State AGbd_915363123bc3cc442023-08-14Verified
Vermont State AGbd_b34e58983fd4ef7a2023-08-14Verified
Massachusetts State AGbd_d01aef59f92905362023-08-14Verified

Show 1 more filing ↓up to 1d gap

New Hampshire State AGbd_c649b7a19c6ad3b62023-08-15 · +1dVerified

Name: Regional Transportation Authority of Northeastern Illinois
norm: regional transportation authority of northeastern illinois

Name: Regional Transportation Authority of Northeastern Illinois
norm: regional transportation authority of northeastern illinois
Industry: GovernmentllmTransportation & Logisticsllm

Discovered: Jul 27, 2023
Breach occurred: Mar 1, 2023
Undetected for: 148 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 14, 2023
Affected individuals: 2,629state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
Threat actor: External

During the incident: Provided 12 months of credit monitoring and identity restoration services from Experian
Sent written notification to affected individuals
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 days(18 days from discovery to filing)
Compliance flags: ME AG ≤30d · 18d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jul 27, 2023
→ Filed with AG: Aug 14, 2023
18d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jul 27, 2023 → Filed with AG: Aug 14, 2023	18d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Montana State AGAug 14 · first

Indiana State AGAug 14 · first

Vermont State AGAug 14 · first

Massachusetts State AGAug 14 · first

Maine State AGAug 14 · first · this page

New Hampshire State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d15dfc1c-04d5-453a-a77c-895ab30fafb7.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 14, 2023
Raw hash: 8528e23bd7326672f9b8e68e0b0ca02d1847f5d1e45fcaa02e16268cbbe788b3

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityRegional Transportation Authority of Northeastern Illinois

Victim entityRegional Transportation Authority of Northeastern Illinois

Incidentdiscovered Jul 27, 2023

Stated responseProvided 12 months of credit monitoring and identity restoration services from Experian

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov