HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Smile Brands Group Inc.
bd_74aefa527fd325d9 · schema v1 · pii pii-v1
Full breach record for Smile Brands Group Inc. →Smile Brands Inc., a healthcare organization, reported a data breach to the Maine Attorney General. The breach, described as an external system hacking incident, occurred between April 23 and April 24, 2021, and was discovered on April 24, 2021. The compromised information includes names and Social Security numbers. While the total number of affected individuals and Maine residents is still under review, Smile Brands Inc. began notifying consumers on September 28, 2021, and offered one year of credit monitoring services through Experian.
Maine clockDiscovered Apr 24, 2021 → Filed with AG Oct 8, 2021167d ✗ ME AG >90d24 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_b38f99f429ded2c9Washington State AGfiled 2021-10-08Verified
- bd_bdaabc04103b621aOregon State AGfiled 2021-10-08Verified
- bd_97047e3f9d80ac21Montana State AGfiled 2021-09-28(10d gap)Verified
- bd_ee44aad4e560c1f0California State AGfiled 2021-09-03(35d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/63d1abe0-900b-4b6e-82d0-c485e6689c6a.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 8, 2021
- Raw hash
- 43a1560e23405eafad96f0ac8bcaaed056ce6fdbb41aea532f5c1a9bee4f6f31
Reporting entity
- Name
- Smile Brands Group Inc.norm: smile brands
Victim entity
- Name
- Smile Brands Group Inc.norm: smile brands
Incident
- Discovered
- Apr 24, 2021
- Materiality determined
- —
- Notification sent
- Sep 28, 2021
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 24 weeks(167 days from discovery to filing)
- Compliance flags
- ME AG >90d · 167dME resident >60d · 157d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 24, 2021→ Filed with AG: Oct 8, 2021167d 90 days ME AG >90d Maine Discovered: Apr 24, 2021→ Notified: Sep 28, 2021157d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.