HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Central Illinois Carpenters Retirement Savings Fund
bd_8bcbcb8c05790b9f · schema v1 · pii pii-v1
Full breach record for Central Illinois Carpenters Retirement Savings Fund →Central Illinois Carpenters Retirement Savings Fund experienced an external system breach (hacking) on October 26, 2020, affecting 7,114 individuals. The incident compromised names and Social Security Numbers. The fund notified affected individuals in writing on December 28, 2020, and offered 12-24 months of credit and identity monitoring services through Experian. 14 Maine residents were specifically affected.
Maine clockDiscovered Oct 26, 2020 → Filed with AG Dec 28, 202063d ⏱ ME AG >30d9 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_2b674ea538cc2d4aMontana State AGfiled 2020-12-28Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1b2c0fad-8273-4031-b2ca-6918f9d9321f.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 28, 2020
- Raw hash
- 39dac10d93a186c81391db245c49751491335a8d7ca1b80be5d5007c893c3d9e
Reporting entity
- Name
- Central Illinois Carpenters Retirement Savings Fundnorm: central illinois carpenters retirement savings
Victim entity
- Name
- Central Illinois Carpenters Retirement Savings Fundnorm: central illinois carpenters retirement savings
Incident
- Discovered
- Oct 26, 2020
- Materiality determined
- —
- Notification sent
- Dec 28, 2020
- Affected individuals
- 7,114
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 weeks(63 days from discovery to filing)
- Compliance flags
- ME AG >30d · 63dME resident >60d · 63d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 26, 2020→ Filed with AG: Dec 28, 202063d 30 days (soft) ME AG >30d Maine Discovered: Oct 26, 2020→ Notified: Dec 28, 202063d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.