HackingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENTMediumContained
Central Maine Area Agency on Aging
bd_86f4868404664225 · schema v1 · pii pii-v1
Full breach record for Central Maine Area Agency on Aging →Central Maine Area Agency on Aging (DBA Spectrum Generations) reported a data breach on April 23, 2026, involving unauthorized access to a single employee email account. The incident affected 8 Maine residents, exposing personal information including names, Social Security numbers, dates of birth, driver's license numbers, and employment history from job application materials. The organization secured the account, engaged cybersecurity professionals, and notified the Maine Attorney General.
Maine clockDiscovered Apr 23, 2026 → Filed with AG Jun 11, 202649d ⏱ ME AG >30d7 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed8 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/52e2f495-e06b-4237-8f44-2bf9fa3323e4.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 11, 2026
- Raw hash
- c9feff8f1799058c624d792e940f0cd83087b0cfc86243849feb3a0ac380a291
Reporting entity
- Name
- Central Maine Area Agency on Agingnorm: central maine area agency on aging
- Domain
- spectrumgenerations.org
- Industry
- Non-Profit
Victim entity
- Name
- Central Maine Area Agency on Agingnorm: central maine area agency on aging
- Domain
- spectrumgenerations.org
- Industry
- Non-Profit
Incident
- Discovered
- Apr 23, 2026
- Materiality determined
- —
- Notification sent
- Jun 4, 2026
- Affected individuals
- 8
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Reported this incident to the Maine Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 7 weeks(49 days from discovery to filing)
- Compliance flags
- ME AG >30d · 49d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 23, 2026→ Filed with AG: Jun 11, 202649d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.