DisclosureLens
HackingCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDHighContained

Child & Family

bd_c1d8f36b12b74fa3 · schema v1 · pii pii-v1

Severity

High

Discovered

May 27, 2022

Filed

Jul 5, 2022

To disclose

6 weeks

Affected · nationwide

1,9772 in this filing

Linked

3 filings

Confidence

63%
Full breach record for Child & Family →5 incidents on file

Child & Family Services, Inc. experienced an external system breach between November 16 and November 18, 2021, discovered on May 27, 2022. The breach affected 2 Maine residents, compromising their names and driver's license or non-driver ID card numbers. The organization notified affected individuals on July 5, 2022, and offered 24 months of complimentary credit and identity monitoring services through Experian.

Maine clockDiscovered May 27, 2022 → Filed with AG Jul 5, 202239d ⏱ ME AG >30d6 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 192 days
discovery → filing · 6 weeks / 39 days

Nov 16, 2021

Begins

May 27, 2022

Discovered

Jul 5, 2022

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
Maine State AGJul 5 · first · this page
Massachusetts State AG+1d
New Hampshire State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.