HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)MediumContained

Greater Boston Legal Services, Inc.

bd_b3dddadad78b2104 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 26, 2021

Filed

Sep 14, 2021

To disclose

11 weeks

Affected

1state residents only

Linked

5 filings

Confidence

67%

Full breach record for Greater Boston Legal Services, Inc. →

Greater Boston Legal Services, Inc. notified individuals of a data breach discovered on June 26, 2021. Unauthorized access may have exposed names, DOBs, addresses, SSNs, and limited health information. The organization offered one year of Experian IdentityWorks credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 11 weeks / 80 days

Jun 26, 2021

Discovered

Sep 14, 2021

Filed

vs. sector median

7 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_b174a8f9d7c8b1082021-09-14Verified
Massachusetts State AGbd_f1561b7e7ef147a92021-09-14Verified
Maine State AGbd_f9ba35ec9bd964362021-09-14Verified
New Hampshire State AGbd_9bc29b4db213f3f62021-09-16 · +2dVerified

Name: Greater Boston Legal Services, Inc.
norm: greater boston legal

Name: Greater Boston Legal Services, Inc.
norm: greater boston legal
Industry: Professional Servicesllm

Discovered: Jun 26, 2021
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDHealth (basic)
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Began an investigation
Took steps to secure our systems
Offering a complimentary one-year membership of Experian IdentityWorksSM Credit 3B
Changes made: Taking additional steps to secure our computer systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(80 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGSep 14 · first

Massachusetts State AGSep 14 · first

Maine State AGSep 14 · first

Montana State AGSep 14 · first · this page

New Hampshire State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/consumer-notification-letter-4.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 14, 2021
Raw hash: 47b13487f91f5cfc4a26dc7b82a8a58f056fb7060826044832bfffc881968dea

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityGreater Boston Legal Services, Inc.

Victim entityGreater Boston Legal Services, Inc.

Incidentdiscovered Jun 26, 2021

Stated responseBegan an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov