Social EngineeringPhishingData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
County of Cumberland
bd_c1fa7c4f8ccf36af · schema v1 · pii pii-v1
Full breach record for County of Cumberland →The County of Cumberland (PA) reported a phishing incident on October 4, 2023, affecting 1,948 individuals. The breach exposed names and Social Security Numbers. One Maine resident was affected. Written notifications were sent on February 14, 2024, offering 12 months of Experian IdentityWorksSM services.
Maine clockDiscovered Oct 4, 2023 → Filed with AG Feb 14, 2024133d ✗ ME AG >90d19 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_4c81f48289759c9dNew Hampshire State AGfiled 2024-02-14Verified
- bd_ffe1a6097949e630Indiana State AGfiled 2024-02-14Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1742aa35-08e7-4334-b01d-1b870b69e6fe.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 14, 2024
- Raw hash
- 717052ee1d289544c5308f370567013ef0475a5b9ab1801d546033bba8fb9300
Reporting entity
- Name
- County of Cumberlandnorm: county of cumberland
- Domain
- cumberlandcountypa.gov
Victim entity
- Name
- County of Cumberlandnorm: county of cumberland
- Domain
- cumberlandcountypa.gov
Incident
- Discovered
- Oct 4, 2023
- Materiality determined
- —
- Notification sent
- Feb 14, 2024
- Affected individuals
- 1,948
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- phishing_link
Compliance
- Time to disclose
- 19 weeks(133 days from discovery to filing)
- Compliance flags
- ME AG >90d · 133dME resident >60d · 133d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 4, 2023→ Filed with AG: Feb 14, 2024133d 90 days ME AG >90d Maine Discovered: Oct 4, 2023→ Notified: Feb 14, 2024133d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.