HackingData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Pinal County Superintendent's Office
bd_88d4281f6a2b1222 · schema v1 · pii pii-v1
Full breach record for Pinal County Superintendent's Office →Pinal County Superintendent's Office reported an external system breach (hacking) occurring between September 25-27, 2023. The incident compromised names and Social Security Numbers of 30,097 individuals, including 14 Maine residents. Written notifications were sent on November 22, 2023, offering 24 months of credit monitoring and identity theft insurance through Cyberscout (TransUnion).
Maine clockDiscovered Sep 25, 2023 → Filed with AG Nov 22, 202358d ⏱ ME AG >30d8 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_00c3355f8c31f3c1Vermont State AGfiled 2023-11-22Verified
- bd_ed85dfbd614a54feMontana State AGfiled 2023-11-20(2d gap)Candidate
- bd_f720ac9b1ffd5e89New Hampshire State AGfiled 2023-11-27(5d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1ca61daa-988b-49c3-a55b-027a8ba38b5d.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 22, 2023
- Raw hash
- c816919cf777e6155b9fddf198ad415333479d5d84dcf716dde9ad79c5dc4996
Reporting entity
- Name
- Pinal County Superintendent's Officenorm: pinal county superintendent s office
Victim entity
- Name
- Pinal County Superintendent's Officenorm: pinal county superintendent s office
Incident
- Discovered
- Sep 25, 2023
- Materiality determined
- —
- Notification sent
- Nov 22, 2023
- Affected individuals
- 30,097
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 8 weeks(58 days from discovery to filing)
- Compliance flags
- ME AG >30d · 58d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 25, 2023→ Filed with AG: Nov 22, 202358d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.