HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighResolved
Harder+Company Community Research
bd_d5df4c771b5f3dc8 · schema v1 · pii pii-v1
Full breach record for Harder+Company Community Research →Harder + Company Community Research, Inc. reported an external system breach (hacking) occurring on 04/17/21 and discovered on 12/03/21. The incident affected 6,762 individuals, including 1 Maine resident. Driver's license numbers and names were compromised. The entity provided 12-24 months of credit/cyber monitoring and ID theft recovery services to affected consumers.
Maine clockDiscovered Dec 3, 2021 → Filed with AG Jan 11, 202239d ⏱ ME AG >30d6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_93b68f8ca673fca9California State AGfiled 2022-01-11Verified
- bd_03a6a2c4216830c2Oregon State AGfiled 2022-01-12(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0623bc2f-d0b8-41d4-b48b-dff6453f8968.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 11, 2022
- Raw hash
- 6106d1fb2b0aaee8525b755ec3602da98fb5691944af864361597db3768cc6b9
Reporting entity
- Name
- Harder+Company Community Researchnorm: harder company community research
Victim entity
- Name
- Harder+Company Community Researchnorm: harder company community research
Incident
- Discovered
- Dec 3, 2021
- Materiality determined
- —
- Notification sent
- Jan 12, 2022
- Affected individuals
- 6,762
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 weeks(39 days from discovery to filing)
- Compliance flags
- ME AG >30d · 39d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 3, 2021→ Filed with AG: Jan 11, 202239d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.