PhysicalLossTheftCustomer Data InvolvedPIIIdentity (basic)Government IDMediumContained

L'Arche St. Louis

bd_680ff1f1c2ea1c3c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 14, 2020

Filed

Nov 10, 2020

To disclose

13 weeks

Affected · nationwide

761 in this filing

Linked

2 filings

Confidence

63%

Full breach record for L'Arche St. Louis →

On August 13, 2020, L'Arche St. Louis experienced a data breach due to the loss or theft of a device containing personal information. The breach was discovered the following day. The incident affected 76 individuals, exposing their names and Social Security numbers. The non-profit organization began notifying affected individuals on November 10, 2020, and offered 12 months of credit monitoring and identity theft protection services through ID Experts.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Aug 14, 2020 → Filed with AG Nov 10, 202088d ⏱ ME AG >30d13 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 1 days

discovery → filing · 13 weeks / 88 days

Aug 13, 2020

Begins

Aug 14, 2020

Discovered

Nov 10, 2020

Filed

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Montana State AGbd_f1ecf2ecd314a90d2020-11-10Verified

Name: L'Arche St. Louis
norm: l arche st louis

Name: L'Arche St. Louis
norm: l arche st louis

Discovered: Aug 14, 2020
Breach occurred: Aug 13, 2020
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Nov 10, 2020
Affected individuals: 76state + nationwide
Data types: PIIIdentity (basic)Government ID
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium

During the incident: Offered 12 months of credit monitoring and identity theft protection through ID Experts.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(88 days from discovery to filing)
Compliance flags: ME AG >30d · 88d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Aug 14, 2020
→ Filed with AG: Nov 10, 2020
88d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Aug 14, 2020 → Filed with AG: Nov 10, 2020	88d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGNov 10 · first

Maine State AGNov 10 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/dd2eeccc-15bc-4b61-83c9-b22d4fdb42aa.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 10, 2020
Raw hash: 7028f4003f4877b2c438b63fec8b2ee5a575cbe624e6f7a4ef21785f76e6d016

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityL'Arche St. Louis

Victim entityL'Arche St. Louis

Incidentdiscovered Aug 14, 2020

Stated responseOffered 12 months of credit monitoring and identity theft protection through ID Experts.

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov