DisclosureLens
HackingRetailCustomer Data InvolvedFinancial accountFinancial credentialsMediumResolved

Sophia Institute Press

bd_7ec35e9f1817a4b0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 22, 2022

Filed

Dec 12, 2022

To disclose

20 days

Affected · nationwide

19,43995 in this filing

Linked

6 filings

Confidence

50%
Full breach record for Sophia Institute Press →

Sophia Institute Press, a non-profit, reported an external hacking incident that occurred from November 26, 2021, to July 23, 2022. The breach was discovered on November 22, 2022. The compromised data involved names and financial account or credit/debit card numbers, along with security codes, access codes, or PINs. A total of 19,439 individuals were affected, with 95 being residents of Maine. Written notifications were sent to affected individuals on December 12, 2022. Identity theft protection services were not offered.

Maine clockDiscovered Nov 22, 2022 → Filed with AG Dec 12, 202220d ✓ ME AG ≤30d20 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 361 days
discovery → filing · 20 days

Nov 26, 2021

Begins

Nov 22, 2022

Discovered

Dec 12, 2022

Filed

This filing is one of 6 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filing ↓up to 4d gap

Filing propagation · 6 filings · 6 states

View merged incident ↗
Indiana State AGDec 12 · first
California State AGDec 12 · first
Montana State AGDec 12 · first
Maine State AGDec 12 · first · this page
Massachusetts State AG+1d
New Hampshire State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.