HackingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSMedium
Epic
bd_af71e3ac8bb9e0ec · schema v1 · pii pii-v1
Full breach record for Epic →Epic Management LLC reported a data breach affecting 10,050 individuals. The incident, described as an external system breach (hacking), occurred between March 2, 2021, and October 9, 2021, but was not discovered until December 9, 2022. The compromised information included names and financial account or credit/debit card numbers along with their security codes or PINs. Epic Management offered affected individuals 12 months of credit monitoring services through IDX.
Maine clockDiscovered Dec 9, 2022 → Filed with AG Dec 13, 20224d ✓ ME AG ≤30d4 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed10,050 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d1b019d5-ab4c-4d61-980a-31967dd37d96.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 13, 2022
- Raw hash
- b7a63ff22075a36e8a7c50b59a0a4dfbda33257bb4dae8b0900f4001b8ee6d58
Reporting entity
- Name
- Epicnorm: epic
- Domain
- getepic.com
Victim entity
- Name
- Epicnorm: epic
- Domain
- getepic.com
Incident
- Discovered
- Dec 9, 2022
- Materiality determined
- —
- Notification sent
- Dec 14, 2022
- Affected individuals
- 10,050
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 4 days(4 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 4d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 9, 2022→ Filed with AG: Dec 13, 20224d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.