HackingCustomer Data InvolvedIDENTITY_GOVERNMENTMedium
Welfare & Pension Administration Service
bd_a919a5f469090b54 · schema v1 · pii pii-v1
Full breach record for Welfare & Pension Administration Service →Welfare & Pension Administration Service, Inc. (WPAS) reported an external system breach that occurred on July 21, 2021, and was discovered on December 20, 2021. The breach affected one Maine resident, compromising their name and Social Security Number. WPAS began notifying affected individuals on February 18, 2022, and offered 12 months of credit monitoring and identity theft restoration services.
Maine clockDiscovered Dec 20, 2021 → Filed with AG Feb 18, 202260d ⏱ ME AG >30d9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_3310fc3e52959a1bMontana State AGfiled 2022-02-18Candidate
- bd_3c90155397c03f17Washington State AGfiled 2022-02-18Verified
- bd_66e850c7b658631fOregon State AGfiled 2022-02-18Verified
- bd_40afb8ad7dca4af5Maine State AGfiled 2022-06-07(109d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 109d gap
- bd_f1d21f60cb700f43Maine State AGfiled 2022-06-07(109d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/79aeeec2-2380-41d4-b90c-b022347f3e25.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 18, 2022
- Raw hash
- 455e037d42743f3c52261606821e66fedac17321ef8ce63548ee3edab7193d98
Reporting entity
- Name
- Welfare & Pension Administration Servicenorm: welfare pension administration service
Victim entity
- Name
- Welfare & Pension Administration Servicenorm: welfare pension administration service
Incident
- Discovered
- Dec 20, 2021
- Materiality determined
- —
- Notification sent
- Feb 18, 2022
- Affected individuals
- 1
- Data types
- IDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 9 weeks(60 days from discovery to filing)
- Compliance flags
- ME AG >30d · 60d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 20, 2021→ Filed with AG: Feb 18, 202260d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.