HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Woodwell Climate Research Center
bd_7f5f012d8a73a178 · schema v1 · pii pii-v1
Full breach record for Woodwell Climate Research Center →Woodwell Climate Research Center notified the Maryland Attorney General of a data security incident occurring between July 25 and August 4, 2024. Unauthorized access resulted in the exfiltration of names, Social Security numbers, and financial account information affecting 12 Maryland residents. Woodwell engaged forensic experts, implemented security hardening, and provided 12 months of identity protection services via Experian.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed12 affectedView incident
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376176.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 13, 2025
- Raw hash
- 5b9204ace50e1cb50731ad8838da56ecd7a380872326196723ea05af9de9dbc6
Reporting entity
- Name
- Constangy, Brooks, Smith & Prophete, LLPnorm: constangy brooks smith prophete
Victim entity
- Name
- Woodwell Climate Research Centernorm: woodwell climate research center
- Domain
- woodwellclimate.org
Incident
- Discovered
- Aug 4, 2024
- Materiality determined
- —
- Notification sent
- Jan 10, 2025
- Affected individuals
- 12
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified Maryland Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 16 months(466 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.