DisclosureLens
HackingHealthcareDelayed DiscoveryCustomer Data InvolvedIdentity (basic)Government IDCriticalContained

Lutheran Social Services of Illinois

bd_681f8a1194fba81c · schema v1 · pii pii-v1

Severity

Critical

Discovered

Dec 28, 2022

Filed

Jun 23, 2023

To disclose

25 weeks

Affected · nationwide

150,6598 in this filing

Confidence

65%
Full breach record for Lutheran Social Services of Illinois →6 incidents on file

Lutheran Social Services of Illinois reported a data breach resulting from an external system hack. The incident occurred on December 31, 2021, and was discovered nearly a year later, on December 28, 2022. The compromised information includes names and Social Security numbers. The organization began notifying affected individuals on January 25, 2023, and offered 12 months of credit monitoring and identity theft protection services through Sonitq. This filing is an update to an initial report from January 25, 2023.

Maine clockDiscovered Dec 28, 2022 → Filed with AG Jun 23, 2023177d ✗ ME AG >90d25 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 362 days
discovery → filing · 25 weeks / 177 days

Dec 31, 2021

Begins

Dec 28, 2022

Discovered

Jun 23, 2023

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed150,659 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.