HackingHealthcareProfessional ServicesHealthcareCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountHealth (basic)MediumContained

Independence Advocates of Maine

bd_a157bd4c49c69f5e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 1, 2025

Filed

Jan 13, 2026

To disclose

41 weeks

Affected · nationwide

10199 in this filing

Confidence

66%

Full breach record for Independence Advocates of Maine →

Independence Advocates of Maine reported an external system breach (hacking) in April 2025 affecting 101 individuals. Unauthorized access to the email environment exposed names, DOBs, SSNs, financial account details, and health information. The organization engaged third-party experts and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Apr 8, 2025

Begins

Jan 13, 2026

Filed

vs. sector median

+29 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed101 affectedView incident

Name: Independence Advocates of Maine
norm: independence advocates of maine
Domain: iamsupports.org

Name: Independence Advocates of Maine
norm: independence advocates of maine
Domain: iamsupports.org
Industry: HealthcarellmProfessional Servicesllm

Discovered: Apr 1, 2025
Breach occurred: Apr 8, 2025
Materiality determined: —
Notification sent: Jan 12, 2025
Affected individuals: 101state + nationwide
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Filed notice with Maine Attorney General
Initial access: exploit_public_facing

During the incident: Collaborating with third-party cybersecurity experts to investigate
Started remediation efforts
Offering 12 months of Experian IdentityWorks Credit Monitoring
Changes made: Further secure our systems to protect your data
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 41 weeks(287 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/6ebf2eab-a5be-4938-a27d-9cc8bb6122e5.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 13, 2026
Raw hash: 65f737e0bb87e25d235a4294327b2b8d92ffc7bc77fbe1d297bc6fe4cb75d080

Reporting entityIndependence Advocates of Maine

Victim entityIndependence Advocates of Maine

Incidentdiscovered Apr 1, 2025

Stated responseCollaborating with third-party cybersecurity experts to investigate

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov