HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
New York Review of Architecture
bd_65d73f6324fabae8 · schema v1 · pii pii-v1
Full breach record for New York Review of Architecture →The Municipal Art Society of New York experienced an external system breach (hacking) on June 20, 2021, discovered on December 17, 2021. The incident compromised the names and Social Security Numbers of 704 individuals, including one Maine resident. The organization notified affected individuals in writing on December 30, 2021, and provided identity theft protection services, including credit monitoring and dark web monitoring.
Maine clockDiscovered Dec 17, 2021 → Filed with AG Dec 31, 202114d ✓ ME AG ≤30d14 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed704 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ac85b728-838e-49fe-98f3-bee32ead0003.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 31, 2021
- Raw hash
- 49548f7b59147a2da5d6433ccf015f90a8c18cecd882b02c09dc368c6247af4f
Reporting entity
- Name
- Municipal Art Society of New Yorknorm: municipal art society of new york
Victim entity
- Name
- New York Review of Architecturenorm: new york review of architecture
- Domain
- nyra.nyc
Incident
- Discovered
- Dec 17, 2021
- Materiality determined
- —
- Notification sent
- Dec 30, 2021
- Affected individuals
- 704
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 14 days(14 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 14d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 17, 2021→ Filed with AG: Dec 31, 202114d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.