Social EngineeringPhishingCustomer Data InvolvedData ExfiltratedPIIIDENTITY_BASICIDENTITY_GOVERNMENTHighResolved
Retirement Clearinghouse
bd_64cbb92c9ed4d3ab · schema v1 · pii pii-v1
Full breach record for Retirement Clearinghouse →Retirement Clearinghouse experienced a phishing incident between March 15 and March 16, 2023, discovered on April 28, 2023. The breach affected 10,509 individuals, compromising their names and Social Security numbers. The company notified the affected individuals on May 12, 2023, and offered 12 months of identity theft protection services through Experian.
Maine clockDiscovered Apr 28, 2023 → Filed with AG May 12, 202314d ✓ ME AG ≤30d14 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_9cb3c2bea8f81f85Oregon State AGfiled 2023-05-12Verified
- bd_babae624a6907883Montana State AGfiled 2023-05-12Verified
- bd_e1b9cf14f5537d0dCalifornia State AGfiled 2023-05-12Verified
- bd_e44c3b51110a9ee6Vermont State AGfiled 2023-05-12Verified
Show 1 more filing ↓Show fewer ↑up to 4d gap
- bd_88f5da311421de60New Hampshire State AGfiled 2023-05-16(4d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e606b13b-240d-42e2-9ccc-71f312f2840b.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 12, 2023
- Raw hash
- 2376f7caeb041db72f8f3d69de13cfcbc729d339a6526a1dea6df76688bb06cf
Reporting entity
- Name
- Retirement Clearinghousenorm: retirement clearinghouse
Victim entity
- Name
- Retirement Clearinghousenorm: retirement clearinghouse
Incident
- Discovered
- Apr 28, 2023
- Materiality determined
- —
- Notification sent
- May 12, 2023
- Affected individuals
- 10,509
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566 Phishing
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 14 days(14 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 14d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 28, 2023→ Filed with AG: May 12, 202314d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.