PhysicalTheftDelayed DiscoveryCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHigh
Town of Concord
bd_9943e59c373d1b0d · schema v1 · pii pii-v1
Full breach record for Town of Concord →The Town of Concord reported a data breach stemming from the loss or theft of a device on October 17, 2019, which was also the date of discovery. The breach impacted 57,116 individuals, compromising their names and driver's license or non-driver identification card numbers. Notification letters were sent to affected residents on September 16, 2021. The town offered 12 months of identity theft protection services, including credit monitoring and fraud restoration, through Kroll.
Maine clockDiscovered Oct 17, 2019 → Filed with AG Sep 17, 2021701d ✗ ME AG >90d23 months discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed57,116 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/2902b35f-dd3b-4629-a920-530fad5b04c1.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 17, 2021
- Raw hash
- ed6bb4f0a9a3559fef4b1596813c67fb1c51b3c18321eb4038e986f4fd674603
Reporting entity
- Name
- Town of Concordnorm: town of concord
Victim entity
- Name
- Town of Concordnorm: town of concord
Incident
- Discovered
- Oct 17, 2019
- Materiality determined
- —
- Notification sent
- Sep 16, 2021
- Affected individuals
- 57,116
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1052 Exfiltration Over Physical Medium
Compliance
- Time to disclose
- 23 months(701 days from discovery to filing)
- Compliance flags
- ME AG >90d · 701dME resident >180d · 700d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 17, 2019→ Filed with AG: Sep 17, 2021701d 90 days ME AG >90d Maine Discovered: Oct 17, 2019→ Notified: Sep 16, 2021700d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.