HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Radio Free Asia
bd_d0575d3608338220 · schema v1 · pii pii-v1
Full breach record for Radio Free Asia →Radio Free Asia, a non-profit organization, reported an external system breach (hacking) occurring on June 17, 2022, discovered on June 28, 2022. The incident compromised names and financial account numbers (including credit/debit card numbers with security codes/PINs) for 3,779 individuals, including one Maine resident. Written notification was sent on November 17, 2022, offering 24 months of credit monitoring and identity restoration services through Equifax.
Maine clockDiscovered Jun 28, 2022 → Filed with AG Nov 17, 2022142d ✗ ME AG >90d20 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3,779 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/15d25674-a4a0-46de-b499-4d1cd704f26d.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 17, 2022
- Raw hash
- 857efebedcb8fd3915d4c5104dbb4d0059f1d15dff97612e83d42584027f202f
Reporting entity
- Name
- Radio Free Asianorm: radio free asia
Victim entity
- Name
- Radio Free Asianorm: radio free asia
Incident
- Discovered
- Jun 28, 2022
- Materiality determined
- —
- Notification sent
- Nov 17, 2022
- Affected individuals
- 3,779
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 20 weeks(142 days from discovery to filing)
- Compliance flags
- ME AG >90d · 142dME resident >60d · 142d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 28, 2022→ Filed with AG: Nov 17, 2022142d 90 days ME AG >90d Maine Discovered: Jun 28, 2022→ Notified: Nov 17, 2022142d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.