HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
GRANT THORNTON LLP
bd_618fec45c9ed840c · schema v1 · pii pii-v1
Full breach record for GRANT THORNTON LLP →Grant Thornton LLP reported an external system breach (hacking) occurring on April 19, 2023, discovered on August 2, 2023. The incident affected 6,242 individuals, including 135 Maine residents. Personal information acquired included names and Social Security Numbers. Grant Thornton provided written notification and offered one year of credit monitoring services through Kroll.
Maine clockDiscovered Aug 2, 2023 → Filed with AG Sep 19, 202348d ⏱ ME AG >30d7 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_17cad5b1f2afa8e1California State AGfiled 2023-09-19Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/5a205f5a-62de-47a5-902d-3c53c3948c89.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 19, 2023
- Raw hash
- 34e931fdaeca72cbcf3a2caf4d5ae9a73eb5e7d1605c38d931dbc0b13215d1b0
Reporting entity
- Name
- GRANT THORNTON LLPnorm: grant thornton
Victim entity
- Name
- GRANT THORNTON LLPnorm: grant thornton
Incident
- Discovered
- Aug 2, 2023
- Materiality determined
- —
- Notification sent
- Sep 19, 2023
- Affected individuals
- 6,242
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 7 weeks(48 days from discovery to filing)
- Compliance flags
- ME AG >30d · 48d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 2, 2023→ Filed with AG: Sep 19, 202348d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.