HackingProfessional ServicesProfessional ServicesData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTPHIHighResolved
Young Consulting
bd_a6f94afdabec5673 · schema v1 · pii pii-v1
Full breach record for Young Consulting →Young Consulting LLC (Atlanta, GA) reported an external system breach (hacking) that occurred on April 10, 2024 and was discovered June 28, 2024. The incident exposed name, Social Security number, tax ID number, and health information of approximately 1,020,108 total individuals, including 1,117 Maine residents. Notifications were issued in multiple waves: August 26, 2024, January 28, 2025, and April 11, 2025. Twelve months of credit monitoring via TransUnion was offered.
Maine clockDiscovered Jun 28, 2024 → Filed with AG Apr 11, 2025287d ✗ ME AG >90d41 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 8 about the same incident.View merged incident
A leak claim by blacksuit about this victim predates this filing by 366 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_03c47f5a6450ccf3Leak Siteblacksuitfiled 2024-05-07(339d gap)Verified by operator
- bd_7315ee3ac8363f75Leak Siteblacksuitfiled 2024-04-10(366d gap)Verified by operator
Regulatory filings (5) · sorted by filing gap
- bd_74ee160876e9cb59California State AGfiled 2025-04-11Verified by operator
- bd_7188534a232b14efWashington State AGfiled 2024-09-18(205d gap)Candidate
- bd_5ce39f38f478348cHHS OCRfiled 2024-09-11(212d gap)Verified by operator
- bd_922c90dafda018a6Oregon State AGfiled 2024-08-26(228d gap)Verified by operator
Show 1 more filing ↓Show fewer ↑up to 228d gap
- bd_be91be0598b363e1Montana State AGfiled 2024-08-26(228d gap)Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d47b8998-f086-4011-ba02-32093d5216ae.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 11, 2025
- Raw hash
- 52b612926770bfeab7d13e884a5deab915f4afdf4a1299641abcfbd54cd0ef8b
Reporting entity
- Name
- Young Consultingnorm: young consulting
- Domain
- youngconsulting-us.com
- Industry
- Other Commercial
Victim entity
- Name
- Young Consultingnorm: young consulting
- Domain
- youngconsulting-us.com
- Industry
- Other Commercial
- Industry
- Professional Servicesllm
Incident
- Discovered
- Jun 28, 2024
- Materiality determined
- —
- Notification sent
- Apr 11, 2025
- Affected individuals
- 1,117
- Data types
- PIIIDENTITY_GOVERNMENTPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notice submitted to Maine Attorney General on August 26, 2024; supplemental notice submitted April 11, 2025
Compliance
- Time to disclose
- 41 weeks(287 days from discovery to filing)
- Compliance flags
- ME AG >90d · 287dME resident >180d · 287dLeak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 28, 2024→ Filed with AG: Apr 11, 2025287d 90 days ME AG >90d Maine Discovered: Jun 28, 2024→ Notified: Apr 11, 2025287d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.