DisclosureLens
AccidentalOtherMisdeliveryCustomer Data InvolvedDelayed DiscoveryPIILowResolved

Denver Area Council, Boy Scouts of America

bd_7d1cd1cf0cf836c0 · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 29, 2024

Filed

Jul 11, 2024

To disclose

10 weeks

Affected

12state residents only

Confidence

83%
Full breach record for Denver Area Council, Boy Scouts of America4 incidents on file

Boy Scouts of America (non-profit, Maine chapter) reported an inadvertent disclosure affecting 12 Maine residents. The breach occurred on May 1, 2023 but was not discovered until April 29, 2024 — nearly one year later. Written notification was sent to affected individuals on April 29, 2024. No identity theft protection services were offered.

Maine clockDiscovered Apr 29, 2024Filed with AG Jul 11, 202473d ME AG >30d10 weeks discovery → filing
notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.

Incident timeline

undetected · 364 days
discovery → filing · 10 weeks / 73 days

May 1, 2023

Begins

Apr 29, 2024

Discovered

Jul 11, 2024

Filed

vs. sector median

+2 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed12 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.