HackingVulnerability ExploitSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumContained
Intellihartx
bd_62e21d4d386c4080 · schema v1 · pii pii-v1
Full breach record for Intellihartx →Intellihartx, LLC, a business services provider, reported a data breach that stemmed from a security incident at its third-party SFTP vendor, Fortra. The breach occurred on January 28, 2023, and was discovered on April 11, 2023. A total of 489,830 individuals were affected, including 70 residents of Maine. The compromised information includes names and Social Security numbers. Intellihartx offered affected individuals 12 months of credit monitoring services through Experian.
Maine clockDiscovered Apr 11, 2023 → Filed with AG Jun 8, 202358d ⏱ ME AG >30d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_5e0029ef3c3a1973Vermont State AGfiled 2023-06-08Verified
- bd_bff3cc611216f3b9Montana State AGfiled 2023-06-08Verified
- bd_c60cd8c33207783cNew Hampshire State AGfiled 2023-06-12(4d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/cd6cca3b-8ef7-40fd-8814-d0688c72716a.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 8, 2023
- Raw hash
- f9f5d906733b9499fd535fdb489b077de382853b4cb30487f16f0c2f6bad874b
Reporting entity
- Name
- Intellihartxnorm: intellihartx
Victim entity
- Name
- Intellihartxnorm: intellihartx
Incident
- Discovered
- Apr 11, 2023
- Materiality determined
- —
- Notification sent
- Jun 8, 2023
- Affected individuals
- 70
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
Compliance
- Time to disclose
- 8 weeks(58 days from discovery to filing)
- Compliance flags
- ME AG >30d · 58d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 11, 2023→ Filed with AG: Jun 8, 202358d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.