HackingCapture Stored DataData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedDelayed DiscoveryPIICREDENTIALSFINANCIALLowResolved
Woodwell Climate Research Center
bd_884d69eba2b6b2c5 · schema v1 · pii pii-v1
Full breach record for Woodwell Climate Research Center →Woodwell Climate Research Center, a Massachusetts-based nonprofit, experienced an external system breach between July 25 and August 4, 2024. An unauthorized actor accessed or downloaded certain data. The review of affected data concluded December 13, 2024. Potentially affected information included names, Social Security numbers, and financial account information. Fourteen Maine residents were notified on January 10, 2025. Experian IdentityWorks (12 months) was offered to affected individuals.
Maine clockDiscovered Aug 4, 2024 → Filed with AG Jan 10, 2025159d ✗ ME AG >90d23 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_013de5bd4427539aNew Hampshire State AGfiled 2025-01-10Verified
- bd_610a806844113b83Vermont State AGfiled 2025-01-10Verified
- bd_6495155626de25bcIndiana State AGfiled 2025-01-10Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d1408b32-2393-4708-af7b-7cef159536dd.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 10, 2025
- Raw hash
- cc0231f961a8a442aa9a543f1872c8e0f71e0b5ea4a74f7dce97f8dffe737808
Reporting entity
- Name
- Woodwell Climate Research Centernorm: woodwell climate research center
- Domain
- woodwellclimate.org
- Industry
- Non-Profit
Victim entity
- Name
- Woodwell Climate Research Centernorm: woodwell climate research center
- Domain
- woodwellclimate.org
- Industry
- Non-Profit
Incident
- Discovered
- Aug 4, 2024
- Materiality determined
- Dec 13, 2024
- Notification sent
- Jan 10, 2025
- Affected individuals
- 14
- Data types
- PIICREDENTIALSFINANCIAL
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified Maine Attorney General per Maine data breach notification statute
Compliance
- Time to disclose
- 23 weeks(159 days from discovery to filing)
- Compliance flags
- ME AG >90d · 159dME resident >60d · 159d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 4, 2024→ Filed with AG: Jan 10, 2025159d 90 days ME AG >90d Maine Discovered: Aug 4, 2024→ Notified: Jan 10, 2025159d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.