DisclosureLens
HackingHealthcareHealthcareCustomer Data InvolvedIdentity (basic)Financial accountMediumResolved

Berkshire Farm Center and Services for Youth

bd_a7f0a45a6058b065 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 31, 2023

Filed

Feb 28, 2023

To disclose

28 days

Affected · nationwide

6,4512 in this filing

Linked

5 filings

Confidence

50%
Full breach record for Berkshire Farm Center and Services for Youth →4 incidents on file

Berkshire Farm Center & Services for Youth reported a data breach affecting 6,451 individuals, including 2 residents of Maine. The breach, which was discovered on January 31, 2023, occurred on July 14, 2022. The compromised information includes names and financial account numbers or credit/debit card numbers with their security codes. The company offered 12 months of credit monitoring and identity theft protection services through Experian to the affected individuals.

Maine clockDiscovered Jan 31, 2023 → Filed with AG Feb 28, 202328d ✓ ME AG ≤30d28 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 201 days
discovery → filing · 28 days

Jul 14, 2022

Begins

Jan 31, 2023

Discovered

Feb 28, 2023

Filed

vs. sector median

8 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Indiana State AGFeb 28 · first
Vermont State AGFeb 28 · first
Massachusetts State AGFeb 28 · first
Maine State AGFeb 28 · first · this page
New Hampshire State AG+6d

Pattern: first filing Feb 28 (IN), last Mar 6 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.