HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
R3 Education
bd_aa05df0b3364d3e0 · schema v1 · pii pii-v1
Full breach record for R3 Education →R3 Education Inc. reported an external system breach that occurred and was discovered on November 7, 2023. The breach compromised the names and Social Security numbers of 7,785 individuals, including 18 Maine residents. Affected individuals were notified on March 25, 2024, and May 24, 2024. The company offered 12 months of credit monitoring and identity theft restoration services through Cyberscout.
Maine clockDiscovered Nov 7, 2023 → Filed with AG May 28, 2024203d ✗ ME AG >90d29 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_9e69937e0c530840New Hampshire State AGfiled 2024-05-28Verified
- bd_ba7f4c07ddee5ab4California State AGfiled 2024-05-28Verified
- bd_e1c177816da456d5Montana State AGfiled 2024-05-24(4d gap)Candidate
- bd_e0a16b5a6841313cIndiana State AGfiled 2024-03-25(64d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a12f4a0c-518d-491c-ba28-a026e6d80799.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 28, 2024
- Raw hash
- 3e6996fba30aa5a9bbefea4200fdcd63cc1095f60a4026031616358a14403699
Reporting entity
- Name
- R3 Educationnorm: r3 education
Victim entity
- Name
- R3 Educationnorm: r3 education
Incident
- Discovered
- Nov 7, 2023
- Materiality determined
- —
- Notification sent
- Mar 25, 2024
- Affected individuals
- 18
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 29 weeks(203 days from discovery to filing)
- Compliance flags
- ME AG >90d · 203dME resident >60d · 139d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 7, 2023→ Filed with AG: May 28, 2024203d 90 days ME AG >90d Maine Discovered: Nov 7, 2023→ Notified: Mar 25, 2024139d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.