HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighResolved
Town of Deerfield MA
bd_6660cff7c19f900c · schema v1 · pii pii-v1
Full breach record for Town of Deerfield MA →The Town of Deerfield MA reported an external system breach (hacking) on March 25, 2021. The incident affected 8,104 individuals, including 27 Maine residents. Compromised data included names and driver's license numbers. Written notification was sent on August 26, 2021, and 12 months of credit monitoring and identity theft restoration services were provided through Kroll.
Maine clockDiscovered Mar 25, 2021 → Filed with AG Aug 26, 2021154d ✗ ME AG >90d22 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed8,104 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/28fc21e1-b953-4fcf-986c-d1afa0fd5ce2.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 26, 2021
- Raw hash
- 1dad57448fe3bb21031311a16337be14bfe792e87ce53218d435fd394481428b
Reporting entity
- Name
- Town of Deerfield MAnorm: town of deerfield ma
Victim entity
- Name
- Town of Deerfield MAnorm: town of deerfield ma
Incident
- Discovered
- Mar 25, 2021
- Materiality determined
- —
- Notification sent
- Aug 26, 2021
- Affected individuals
- 8,104
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 22 weeks(154 days from discovery to filing)
- Compliance flags
- ME AG >90d · 154dME resident >60d · 154d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 25, 2021→ Filed with AG: Aug 26, 2021154d 90 days ME AG >90d Maine Discovered: Mar 25, 2021→ Notified: Aug 26, 2021154d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.