HackingCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDHighContained

Woodward Communications, Inc.

bd_d45ff46d06c9fb81 · schema v1 · pii pii-v1

Severity

High

Discovered

Jan 19, 2023

Filed

Apr 10, 2023

To disclose

12 weeks

Affected · nationwide

12,4674 in this filing

Linked

8 records

Confidence

65%

Full breach record for Woodward Communications, Inc. →

Woodward Communications, Inc. reported an external system breach that occurred and was discovered on January 19, 2023. The incident affected 12,467 individuals, including 4 Maine residents, and involved the compromise of names and Social Security numbers. The company began notifying affected individuals on April 5, 2023, and offered 12 months of complimentary credit monitoring and identity theft protection services.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jan 19, 2023 → Filed with AG Apr 10, 202381d ⏱ ME AG >30d12 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 12 weeks / 81 days

Jan 19, 2023

Begins

Jan 19, 2023

Discovered

Apr 10, 2023

Filed

This filing is one of 8 records about the same incident.View merged incident

A leak claim by lockbit_3 about this victim was first seen 63 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitedispossessorbd_5b9961b06eec7e7f2023-04-03 · +7dVerified by operator
Leak Sitelockbit_3bd_adb42a26c53816c82023-02-06 · +63dCandidate

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_c77fca0e10a469662023-04-09 · +1dVerified
Indiana State AGbd_16733702dab965882023-04-05 · +5dVerified
Montana State AGbd_7c1d34b0f0d7406a2023-04-05 · +5dVerified
New Hampshire State AGbd_c24d058a97214f2d2023-04-05 · +5dVerified

Show 1 more filing ↓up to 99d gap

Illinois State AGbd_2841f08c6295f2282023-01-01 · +99dCandidate

Name: Woodward Communications, Inc.
norm: woodward communications
Domain: wcinet.com

Name: Woodward Communications, Inc.
norm: woodward communications
Domain: wcinet.com

Discovered: Jan 19, 2023
Breach occurred: Jan 19, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 5, 2023
Affected individuals: 12,467state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
Threat actor: External

During the incident: Sent written notification to affected consumers
Offered identity theft protection services
Changes made: Offered 12 months of credit monitoring, CyberScan dark web monitoring, fully managed identity recovery services, and $1 million in identity theft insurance coverage
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(81 days from discovery to filing)
Compliance flags: ME AG >30d · 81dME resident >60d · 76dLeak >30d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jan 19, 2023
→ Filed with AG: Apr 10, 2023
81d 30 days (soft) ME AG >30d
Maine
Discovered: Jan 19, 2023
→ Notified: Apr 5, 2023
76d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jan 19, 2023 → Filed with AG: Apr 10, 2023	81d	30 days (soft)	ME AG >30d
Maine	Discovered: Jan 19, 2023 → Notified: Apr 5, 2023	76d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Illinois State AGJan 1 · first

Indiana State AG+94d

Montana State AG+94d

New Hampshire State AG+94d

Massachusetts State AG+98d

Maine State AG+99d · this page

Pattern: first filing Jan 1 (IL), last Apr 10 (ME) — a 99-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e3f4d390-9dd7-4c17-9a48-6a9f3ff58da3.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 10, 2023
Raw hash: 5a26cae3d0ad6bb0e1d74b5fb27962843a2b8bb8e93274d14de30de2fae86c33

Linked disclosures

Ransomware claims (2)

Regulatory filings (5) · sorted by filing gap

Reporting entityWoodward Communications, Inc.

Victim entityWoodward Communications, Inc.

Incidentdiscovered Jan 19, 2023

Stated responseSent written notification to affected consumers

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov