HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
J. Wavro Associates
bd_c619032a3baa3309 · schema v1 · pii pii-v1
Full breach record for J. Wavro Associates →J Wavro Associates Inc. & J. Wavro Property Management Company reported an external system breach (hacking) occurring on April 19, 2022, discovered on April 24, 2022. The incident affected 650 individuals, including 1 Maine resident. Acquired data included names and driver's license numbers. The entity provided written notification and offered 12 months of identity theft protection services through IDX.
Maine clockDiscovered Apr 24, 2022 → Filed with AG Jun 10, 202247d ⏱ ME AG >30d7 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed650 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c72194c5-7f04-43fd-8a75-1b5f3c6da8a0.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 10, 2022
- Raw hash
- a9f4f531efed96a07272d48945499f2028d791b43bb5575796d2e073c7a5f9ab
Reporting entity
- Name
- J. Wavro Associatesnorm: j wavro associates
- Domain
- jwavro.com
Victim entity
- Name
- J. Wavro Associatesnorm: j wavro associates
- Domain
- jwavro.com
Incident
- Discovered
- Apr 24, 2022
- Materiality determined
- —
- Notification sent
- Jun 9, 2022
- Affected individuals
- 650
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 7 weeks(47 days from discovery to filing)
- Compliance flags
- ME AG >30d · 47d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 24, 2022→ Filed with AG: Jun 10, 202247d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.