HackingCustomer Data InvolvedIdentity (basic)Government IDHighContained

Apex Systems

bd_c5c424373136c117 · schema v1 · pii pii-v1

Severity

High

Discovered

Nov 8, 2020

Filed

Dec 14, 2020

To disclose

5 weeks

Affected · nationwide

3,6261 in this filing

Linked

3 filings

Confidence

50%

Full breach record for Apex Systems →3 incidents on file

Apex Systems reported a data breach to the Maine Attorney General, which occurred and was discovered on November 8, 2020. The breach was an external system hack that affected one Maine resident, part of a larger group of 3,626 individuals. The compromised information included names and Social Security numbers. Affected individuals were notified on December 9, 2020, and offered twelve months of identity theft protection services through Experian.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Nov 8, 2020 → Filed with AG Dec 14, 202036d ⏱ ME AG >30d5 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 5 weeks / 36 days

Nov 8, 2020

Begins

Nov 8, 2020

Discovered

Dec 14, 2020

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_83cb3abbf49fd0d62020-12-14Verified
Indiana State AGbd_a67e3cada14eabcd2020-12-09 · +5dVerified

Name: Apex Systems
norm: apex systems

Name: Apex Systems
norm: apex systems

Discovered: Nov 8, 2020
Breach occurred: Nov 8, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 9, 2020
Affected individuals: 3,626state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access

Changes made: Experian will be providing identity theft protection services for twelve months. They will be providing credit reports, credit monitoring, identity restoration, and identity theft insurance.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(36 days from discovery to filing)
Compliance flags: ME AG >30d · 36d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Nov 8, 2020
→ Filed with AG: Dec 14, 2020
36d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Nov 8, 2020 → Filed with AG: Dec 14, 2020	36d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGDec 9 · first

Massachusetts State AG+5d

Maine State AG+5d · this page

Pattern: first filing Dec 9 (IN), last Dec 14 (ME) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/9e2566a2-fc59-427d-9be7-04123b52614f.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 14, 2020
Raw hash: 633523a6c4f7a126fa058a9ecae9f49483c1f333139f702749e9455f68b159ff

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityApex Systems

Victim entityApex Systems

Incidentdiscovered Nov 8, 2020

Stated responseExperian will be providing identity theft protection services for twelve months. They will be providing credit reports, credit monitoring, identity restoration, and identity theft insurance.

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov