HackingCustomer Data InvolvedIDENTITY_GOVERNMENTMediumContained
General Services Corporation
bd_904ca574e49958ce · schema v1 · pii pii-v1
Full breach record for General Services Corporation →ICAFS, Inc. dba General Services Corporation (“GSC”) reported an external system breach (hacking) that occurred on April 10, 2023, and was discovered on May 30, 2023. The breach affected 9,913 individuals in total, including 6 Maine residents. The compromised information includes names in combination with Driver's License or Non-Driver Identification Card Numbers. GSC began notifying affected consumers on July 6, 2023, and offered 24 months of credit monitoring and identity protection services through IDX.
Maine clockDiscovered May 30, 2023 → Filed with AG Sep 28, 2023121d ✗ ME AG >90d17 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_39908198543f4af2New Hampshire State AGfiled 2023-09-28Verified
- bd_f2e42433c6d542e6Vermont State AGfiled 2023-08-17(42d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/8cd27365-4454-4b56-b68b-f7323a468594.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 28, 2023
- Raw hash
- 5310fe06ae7cc206c4dcb055f6c4060fa9c4e06e8d1d2d708e48ea78c24516d8
Reporting entity
- Name
- General Services Corporationnorm: general services
Victim entity
- Name
- General Services Corporationnorm: general services
Incident
- Discovered
- May 30, 2023
- Materiality determined
- —
- Notification sent
- Jul 6, 2023
- Affected individuals
- 6
- Data types
- IDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 17 weeks(121 days from discovery to filing)
- Compliance flags
- ME AG >90d · 121d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 30, 2023→ Filed with AG: Sep 28, 2023121d 90 days ME AG >90d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.