DisclosureLens
HackingHospitalityOtherHospitalityCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsMediumContained

Winterthur Museum, Garden & Library

bd_ba297558daccf96d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 7, 2022

Filed

Mar 14, 2022

To disclose

5 weeks

Affected · nationwide

2,1104 in this filing

Linked

5 filings

Confidence

75%
Full breach record for Winterthur Museum, Garden & Library →

Winterthur Museum, Garden & Library experienced an external system breach on January 17, 2022, which was discovered on February 7, 2022. The breach affected 4 Maine residents, compromising their names and financial account or card numbers. In response, the entity offered 12 months of credit monitoring and identity restoration services through Experian.

Maine clockDiscovered Feb 7, 2022 → Filed with AG Mar 14, 202235d ⏱ ME AG >30d5 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 21 days
discovery → filing · 5 weeks / 35 days

Jan 17, 2022

Begins

Feb 7, 2022

Discovered

Mar 14, 2022

Filed

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Indiana State AGMar 14 · first
Massachusetts State AGMar 14 · first
Delaware State AGMar 14 · first
Maine State AGMar 14 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.