HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
United Way of Northwest Florida
bd_9ed231d79a5a4b1f · schema v1 · pii pii-v1
Full breach record for United Way of Northwest Florida →Life Management Center of Northwest Florida, Inc. reported an external system breach (hacking) occurring on March 30, 2023, discovered on May 26, 2023. The incident compromised the names and Social Security Numbers of 18,826 individuals, including 16 Maine residents. The organization provided written notification and offered 12 months of credit monitoring and identity protection services through Equifax.
Maine clockDiscovered May 26, 2023 → Filed with AG Jul 25, 202360d ⏱ ME AG >30d9 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_0ebb83af4c77330cVermont State AGfiled 2023-07-25Verified
- bd_ee44adf2b386fca1Montana State AGfiled 2023-07-25Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/cb9f254e-2c16-4e40-9af0-a8a6ba82743b.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 25, 2023
- Raw hash
- f59af130e46761406dd70eeff600041ac827b71118b2bd97c0c871ec59db0d23
Reporting entity
- Name
- United Way of Northwest Floridanorm: united way of northwest florida
- Domain
- volunteer.unitedwaynwfl.org
- Industry
- Healthcare
Victim entity
- Name
- United Way of Northwest Floridanorm: united way of northwest florida
- Domain
- volunteer.unitedwaynwfl.org
- Industry
- Healthcare
Incident
- Discovered
- May 26, 2023
- Materiality determined
- —
- Notification sent
- Jul 25, 2023
- Affected individuals
- 18,826
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 weeks(60 days from discovery to filing)
- Compliance flags
- ME AG >30d · 60d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 26, 2023→ Filed with AG: Jul 25, 202360d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.