HackingCustomer Data InvolvedFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSIDENTITY_BASICLowResolved
United McGill Corporation
bd_70589aa99036da26 · schema v1 · pii pii-v1
Full breach record for United McGill Corporation →United McGill Corporation reported an external system breach that occurred and was discovered on February 16, 2022. The breach affected 525 individuals, including one Maine resident. The compromised data included names combined with financial account numbers or credit/debit card numbers along with their security codes or PINs. Affected residents were notified on April 14, 2022, and were offered 12 months of credit monitoring and identity protection services.
Maine clockDiscovered Feb 16, 2022 → Filed with AG Apr 19, 202262d ⏱ ME AG >30d9 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
A leak claim by conti about this victim predates this filing by 46 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_a298e9f961c58e42Leak Sitecontifiled 2022-03-04(46d gap)Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/88bd0c85-f910-4325-9659-7c4729aa3190.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 19, 2022
- Raw hash
- e1a7f2a088bd6b3742e5f59886f55beecc980a37a9a18d8cfe81ee307a0e885d
Reporting entity
- Name
- United McGill Corporationnorm: united mcgill
Victim entity
- Name
- United McGill Corporationnorm: united mcgill
Incident
- Discovered
- Feb 16, 2022
- Materiality determined
- —
- Notification sent
- Apr 14, 2022
- Affected individuals
- 1
- Data types
- FINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSIDENTITY_BASIC
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 9 weeks(62 days from discovery to filing)
- Compliance flags
- ME AG >30d · 62dLeak >30d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 16, 2022→ Filed with AG: Apr 19, 202262d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.