HackingDelayed DiscoveryData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained
Tyto Care Inc. and Tyto Care Ltd.
bd_d95490499a23ae93 · schema v1 · pii pii-v1
Full breach record for Tyto Care Inc. and Tyto Care Ltd. →Tyto Care Inc. and Tyto Care Ltd. reported a data breach affecting 449 individuals, including 2 Maine residents. The incident, an external system breach (hacking), occurred on January 26, 2021, and was discovered on September 1, 2023. The compromised information included names in combination with financial account or card numbers and their associated security codes or PINs. Affected individuals were notified on November 15, 2023.
Maine clockDiscovered Sep 1, 2023 → Filed with AG Nov 15, 202375d ⏱ ME AG >30d11 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f0a04a5b-20a5-4425-ab3f-e125e04d8aac.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 15, 2023
- Raw hash
- 6161f64b3958abe37bb4861985a9b5092cbe959f39c88c8f7f35d22b3f229081
Reporting entity
- Name
- Tyto Care Inc. and Tyto Care Ltd.norm: tyto care inc and tyto care
Victim entity
- Name
- Tyto Care Inc. and Tyto Care Ltd.norm: tyto care inc and tyto care
Incident
- Discovered
- Sep 1, 2023
- Materiality determined
- —
- Notification sent
- Nov 15, 2023
- Affected individuals
- 2
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 11 weeks(75 days from discovery to filing)
- Compliance flags
- ME AG >30d · 75dME resident >60d · 75d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 1, 2023→ Filed with AG: Nov 15, 202375d 30 days (soft) ME AG >30d Maine Discovered: Sep 1, 2023→ Notified: Nov 15, 202375d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.