HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
State Bar of Georgia
bd_5f352d5e00d31e80 · schema v1 · pii pii-v1
Full breach record for State Bar of Georgia →The State Bar of Georgia experienced an external system breach (hacking) on 04/28/2022, discovered on 04/28/2022 and 09/20/2022. Approximately 52,159 individuals were affected, including 25 Maine residents. The breach compromised names and driver's license numbers. The Bar provided 1-year credit monitoring services via Cyber Scout and issued substitute notices on 10/07/2022.
Maine clockDiscovered Apr 28, 2022 → Filed with AG Oct 7, 2022162d ✗ ME AG >90d23 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
A leak claim by bitlocker about this victim predates this filing by 158 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_0ce6a596caf01769Leak Sitebitlockerfiled 2022-05-02(158d gap)Candidate
Regulatory filings (2) · sorted by filing gap
- bd_ada264b59572b165Montana State AGfiled 2022-10-07Verified
- bd_c756708edd2c77efCalifornia State AGfiled 2022-10-07Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/227fe72e-078a-402c-ab8d-b848c5a65066.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 7, 2022
- Raw hash
- 44b138e7685e3fb38dfb6807dfcda17a635c4182839f4071da44c9c5b580a745
Reporting entity
- Name
- State Bar of Georgianorm: state bar of georgia
Victim entity
- Name
- State Bar of Georgianorm: state bar of georgia
Incident
- Discovered
- Apr 28, 2022
- Materiality determined
- —
- Notification sent
- Oct 7, 2022
- Affected individuals
- 52,159
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 23 weeks(162 days from discovery to filing)
- Compliance flags
- ME AG >90d · 162dME resident >60d · 162dLeak >90d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 28, 2022→ Filed with AG: Oct 7, 2022162d 90 days ME AG >90d Maine Discovered: Apr 28, 2022→ Notified: Oct 7, 2022162d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.