HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
COMMUNITY CONNECTIONS REAL ESTATE FOUNDATION
bd_67991cf185a26a97 · schema v1 · pii pii-v1
Full breach record for COMMUNITY CONNECTIONS REAL ESTATE FOUNDATION →Community Connections, a healthcare entity based in Washington, DC, reported an external system breach (hacking) occurring on March 18, 2026, discovered on March 20, 2026. The incident affected 20,879 individuals, including 2 Maine residents. The breach involved the acquisition of personal identifiers. Community Connections provided written notification to affected individuals on June 3, 2026, and offered 12 months of credit monitoring and identity theft protection services through Cyberscout, a TransUnion company.
Leak gap clock✗ Leak >180d11 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
A leak claim by inc_ransom about this victim predates this filing by 591 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_7536a02039173c3eIndiana State AGfiled 2026-06-03(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/cb7caccd-df41-49cb-8a41-69b507e79782.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 4, 2026
- Raw hash
- 6097001fd6eb8813ab2f4daa3ccd2d7c4ef5741b0556f0057cc29487d09c1df0
Reporting entity
- Name
- COMMUNITY CONNECTIONS REAL ESTATE FOUNDATIONnorm: community connections real estate
Victim entity
- Name
- COMMUNITY CONNECTIONS REAL ESTATE FOUNDATIONnorm: community connections real estate
Incident
- Discovered
- Mar 20, 2026
- Materiality determined
- —
- Notification sent
- Jun 3, 2026
- Affected individuals
- 20,879
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with the Maine Office of the Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 11 weeks(76 days from discovery to filing)
- Compliance flags
- Leak >180dME AG >30d · 76dME resident >60d · 75d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 20, 2026→ Filed with AG: Jun 4, 202676d 30 days (soft) ME AG >30d Maine Discovered: Mar 20, 2026→ Notified: Jun 3, 202675d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.