HackingData ExfiltratedEmployee Data InvolvedDelayed DiscoveryPIIEMPLOYMENTLowContained
The Kendal Corporation
bd_c31911bef98904e5 · schema v1 · pii pii-v1
Full breach record for The Kendal Corporation →The Kendal Corporation (a non-profit) reported an external system breach (hacking) affecting current and former employee data. Unauthorized access to files on the TKC network occurred between June 26–30, 2024, and was discovered on December 6, 2024. Approximately 9,810 individuals were affected total, with 5 Maine residents. TKC notified law enforcement, engaged forensic specialists, and offered 24 months of credit monitoring and identity protection services.
Maine clockDiscovered Dec 6, 2024 → Filed with AG Dec 31, 202425d ✓ ME AG ≤30d25 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_dbebfd707b1fce33Vermont State AGfiled 2024-12-30(1d gap)Verified
- bd_58ba581dac763481New Hampshire State AGfiled 2025-01-02(2d gap)Verified
- bd_42d2c8983f75f43cIndiana State AGfiled 2024-12-27(4d gap)Verified
- bd_c2e8744075523f9eNew Hampshire State AGfiled 2024-09-17(105d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 111d gap
- bd_a5608ebfb0a0bf05Vermont State AGfiled 2024-09-11(111d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b2c3a532-7b0b-4f6d-974d-14b49899cf5b.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 31, 2024
- Raw hash
- e820785a33fa4835cebf25f14879a6f7cd0c7f5d980ae69f06dede514db922b7
Reporting entity
- Name
- The Kendal Corporationnorm: the kendal
- Industry
- Non-Profit
Victim entity
- Name
- The Kendal Corporationnorm: the kendal
- Industry
- Non-Profit
Incident
- Discovered
- Dec 6, 2024
- Materiality determined
- —
- Notification sent
- Dec 27, 2024
- Affected individuals
- 5
- Data types
- PIIEMPLOYMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified law enforcement
Compliance
- Time to disclose
- 25 days(25 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 25d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 6, 2024→ Filed with AG: Dec 31, 202425d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.