HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICCriticalContained
Ethos Group Holdings, Inc.
bd_923f14acb9b4cc76 · schema v1 · pii pii-v1
Full breach record for Ethos Group Holdings, Inc. →Ethos Group, Inc. reported an external system breach (hacking) occurring July 30-31, 2022, discovered October 24, 2022. The incident affected 822,723 individuals, including 129 Maine residents. Acquired data included names and driver's license numbers. Written notification was sent on November 2, 2022. No identity theft protection services were offered.
Maine clockDiscovered Oct 24, 2022 → Filed with AG Nov 2, 20229d ✓ ME AG ≤30d9 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_496cf555cfc461c5Oregon State AGfiled 2022-11-02Candidate
- bd_76cb84fcace95551Montana State AGfiled 2022-11-02Verified
- bd_793327688fe8b385California State AGfiled 2022-11-02Verified
- bd_a10da1c1650d2638Washington State AGfiled 2022-11-02Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c1af9d00-86a4-4dab-ae18-faeff7ec9058.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 2, 2022
- Raw hash
- 54bf7a6a79898f921da5ca41c0ab7d92e99f0099f78dc66407826ec5ae2f421b
Reporting entity
- Name
- Ethos Group Holdings, Inc.norm: ethos group
- Domain
- ethosgroup.com
Victim entity
- Name
- Ethos Group Holdings, Inc.norm: ethos group
- Domain
- ethosgroup.com
Incident
- Discovered
- Oct 24, 2022
- Materiality determined
- —
- Notification sent
- Nov 2, 2022
- Affected individuals
- 822,723
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 days(9 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 9d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 24, 2022→ Filed with AG: Nov 2, 20229d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.