HackingCustomer Data InvolvedGovernment IDHighResolved

Kisco Senior Living

bd_bf4a8afa6c1d0153 · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 6, 2023

Filed

Apr 19, 2024

To disclose

45 weeks

Affected · nationwide

26,66313 in this filing

Linked

7 filings

Confidence

75%

Full breach record for Kisco Senior Living →

Kisco Senior Living, LLC reported an external system breach that was discovered on June 6, 2023. The breach compromised the names and Social Security numbers of 13 Maine residents. Notification to affected individuals occurred on April 17, 2024, and identity theft protection services were offered.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jun 6, 2023 → Filed with AG Apr 19, 2024318d ✗ ME AG >90d45 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 5 days

discovery → filing · 45 weeks / 318 days

Jun 1, 2023

Begins

Jun 6, 2023

Discovered

Apr 19, 2024

Filed

This filing is one of 7 about the same incident.View merged incident

A leak claim by blackbyte about this victim predates this filing by 308 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteblackbytebd_97e4a4804c5982e42023-06-16 · +308dVerified by operator

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_a91f39401e76e8152024-04-19Verified by operator
California State AGbd_2f2ae62c227924412024-04-18 · +1dVerified
Vermont State AGbd_ae5fc063c5610e632024-04-17 · +2dVerified by operator
Montana State AGbd_af958651b75c8f512024-04-17 · +2dVerified by operator

Show 1 more filing ↓up to 2d gap

Indiana State AGbd_b04653fba58540562024-04-17 · +2dVerified by operator

Name: Kisco Senior Living
norm: kisco senior living
Domain: kiscoseniorliving.com

Name: Kisco Senior Living
norm: kisco senior living
Domain: kiscoseniorliving.com

Discovered: Jun 6, 2023
Breach occurred: Jun 1, 2023
Undetected for: 5 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 17, 2024
Affected individuals: 26,663state + nationwide
Data types: Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
Threat actor: External

Changes made: Offered identity theft protection services through IDX, including credit, identity, and dark web monitoring, a $1M fraud insurance policy, and access to a 90-day call center.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 45 weeks(318 days from discovery to filing)
Compliance flags: ME AG >90d · 318dME resident >180d · 316dLeak >180d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jun 6, 2023
→ Filed with AG: Apr 19, 2024
318d 90 days ME AG >90d
Maine
Discovered: Jun 6, 2023
→ Notified: Apr 17, 2024
316d 180 days ME resident >180d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jun 6, 2023 → Filed with AG: Apr 19, 2024	318d	90 days	ME AG >90d
Maine	Discovered: Jun 6, 2023 → Notified: Apr 17, 2024	316d	180 days	ME resident >180d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Vermont State AGApr 17 · first

Montana State AGApr 17 · first

Indiana State AGApr 17 · first

California State AG+1d

Massachusetts State AG+2d

Maine State AG+2d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ac6bb7ea-b7b1-4f2f-8a5b-985c4aa1f84a.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 19, 2024
Raw hash: b640f2c7452297bf4f706b1fa5142b6f82871629997d926c6c7a4624f112c7b9

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityKisco Senior Living

Victim entityKisco Senior Living

Incidentdiscovered Jun 6, 2023

Stated responseOffered identity theft protection services through IDX, including credit, identity, and dark web monitoring, a $1M fraud insurance policy, and access to a 90-day call center.

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov