HackingOtherCustomer Data InvolvedData ExfiltratedDelayed DiscoveryPIICREDENTIALSFINANCIALLowContained
Lewy Body Dementia Association, Inc
bd_c26fdd5a8eb208d8 · schema v1 · pii pii-v1
Full breach record for Lewy Body Dementia Association, Inc →Lewy Body Dementia Association, Inc. (LBDA) experienced an external system breach involving unauthorized access to its payroll platform on or around April 23, 2025. The incident was discovered on May 21, 2025 following internal investigation and third-party forensic review. Potentially compromised data includes names, Social Security numbers, and bank account information. One Maine resident was affected out of 70 total. LBDA offered 12-month Experian IdentityWorks credit monitoring.
Maine clockDiscovered May 21, 2025 → Filed with AG Jun 3, 202513d ✓ ME AG ≤30d13 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0d845d9a-2c66-45d6-af48-5d5476279dd4.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 3, 2025
- Raw hash
- 5ecb96bf10b0dbe76b856586da832257863a3a3a1603c3922fad270316c33bd1
Reporting entity
- Name
- Lewy Body Dementia Association, Incnorm: lewy body dementia
- Industry
- Non-Profit
Victim entity
- Name
- Lewy Body Dementia Association, Incnorm: lewy body dementia
- Industry
- Non-Profit
- Industry
- Otherllm
Incident
- Discovered
- May 21, 2025
- Materiality determined
- —
- Notification sent
- Jun 3, 2025
- Affected individuals
- 1
- Data types
- PIICREDENTIALSFINANCIAL
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 13 days(13 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 13d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 21, 2025→ Filed with AG: Jun 3, 202513d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.