MultiplePhishingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTHighResolved
American Federation of Musicians and Employers' Pension Fund
bd_a73db7963aed25bb · schema v1 · pii pii-v1
Full breach record for American Federation of Musicians and Employers' Pension Fund →American Federation of Musicians and Employers' Pension Fund experienced a data breach affecting 3,439 individuals due to a phishing incident. The breach occurred on May 22, 2020, and was discovered on August 18, 2020. The compromised information included names and Social Security numbers. Affected individuals were notified on January 11, 2021, and offered 12 months of credit monitoring and identity restoration services through TransUnion.
Maine clockDiscovered Aug 18, 2020 → Filed with AG Jan 12, 2021147d ✗ ME AG >90d21 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_bbbbe1f72be2995aMaine State AGfiled 2021-01-12Verified
- bd_1de5f609fa8e90b7Montana State AGfiled 2021-01-11(1d gap)Candidate
- bd_ed0f72b54a8ca9e1California State AGfiled 2021-01-11(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/dfe75680-ab80-47f2-aa6d-2440a4e450c5.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 12, 2021
- Raw hash
- e851fb6cccbdd736dfaa4298603974f9496db03c87bfe03dc3655094b1a54f6c
Reporting entity
- Name
- American Federation of Musicians and Employers' Pension Fundnorm: american federation of musicians and employers pension
Victim entity
- Name
- American Federation of Musicians and Employers' Pension Fundnorm: american federation of musicians and employers pension
Incident
- Discovered
- Aug 18, 2020
- Materiality determined
- —
- Notification sent
- Jan 11, 2021
- Affected individuals
- 3,439
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566 PhishingT1078 Valid Accounts
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 21 weeks(147 days from discovery to filing)
- Compliance flags
- ME AG >90d · 147dME resident >60d · 146d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 18, 2020→ Filed with AG: Jan 12, 2021147d 90 days ME AG >90d Maine Discovered: Aug 18, 2020→ Notified: Jan 11, 2021146d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.