HackingProfessional ServicesCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDHighContained

CHEMONICS INTERNATIONAL, INC.

bd_769c0bb4873b526e · schema v1 · pii pii-v1

Severity

High

Discovered

Jul 12, 2021

Filed

Sep 30, 2022

To disclose

15 months

Affected · nationwide

6,1547 in this filing

Linked

5 filings

Confidence

65%

Full breach record for CHEMONICS INTERNATIONAL, INC. →2 incidents on file

Chemonics International, Inc. experienced an external system breach between March 2, 2021, and July 13, 2021, which was discovered on July 12, 2021. The breach compromised the names and driver's license or non-driver ID card numbers of 6,154 individuals, including 7 Maine residents. Affected individuals were notified on September 30, 2022, and offered 24 months of complimentary credit monitoring and identity restoration services through Experian.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jul 12, 2021 → Filed with AG Sep 30, 2022445d ✗ ME AG >90d15 months discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 132 days

discovery → filing · 15 months / 445 days

Mar 2, 2021

Begins

Jul 12, 2021

Discovered

Sep 30, 2022

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Montana State AGbd_1872409e6f541d4f2022-09-30Candidate
Massachusetts State AGbd_59039d4ee5ed1ed02022-09-30Verified
Indiana State AGbd_b18c230b4d6a72de2022-09-30Verified
New Hampshire State AGbd_dbeccbbf8d84c0af2022-10-03 · +3dVerified

Name: CHEMONICS INTERNATIONAL, INC.
norm: chemonics international

Name: CHEMONICS INTERNATIONAL, INC.
norm: chemonics international

Discovered: Jul 12, 2021
Breach occurred: Mar 2, 2021 – Jul 13, 2021
Undetected for: 132 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 30, 2022
Affected individuals: 6,154state + nationwide
Data types: Identity (basic)Government ID
Data elements: Driver's licence number
Attack vector: Unauthorized Access
Threat actor: External

During the incident: Offered 24 months of free credit monitoring and identity restoration services through Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 months(445 days from discovery to filing)
Compliance flags: ME AG >90d · 445dME resident >180d · 445d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jul 12, 2021
→ Filed with AG: Sep 30, 2022
445d 90 days ME AG >90d
Maine
Discovered: Jul 12, 2021
→ Notified: Sep 30, 2022
445d 180 days ME resident >180d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jul 12, 2021 → Filed with AG: Sep 30, 2022	445d	90 days	ME AG >90d
Maine	Discovered: Jul 12, 2021 → Notified: Sep 30, 2022	445d	180 days	ME resident >180d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGSep 30 · first

Massachusetts State AGSep 30 · first

Indiana State AGSep 30 · first

Maine State AGSep 30 · first · this page

New Hampshire State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d8303b9c-77b2-483b-9daa-b27772e3cad8.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 30, 2022
Raw hash: 93aaab428974e7b67b3783a0d0fddde0c36aa52769be862bb786fe2a4a82f645

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityCHEMONICS INTERNATIONAL, INC.

Victim entityCHEMONICS INTERNATIONAL, INC.

Incidentdiscovered Jul 12, 2021

Stated responseOffered 24 months of free credit monitoring and identity restoration services through Experian

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov