HackingCustomer Data InvolvedPIIIDENTITY_BASICLowContained
The Civic Committee
bd_da82b357170807e5 · schema v1 · pii pii-v1
Full breach record for The Civic Committee →Civic Committee of the Commercial Club of Chicago notified the Maryland Attorney General on March 27, 2025, of a data security incident discovered on March 21, 2025. A third party gained unauthorized access to IT systems, impacting 1 Maryland resident's personal information. The Committee reported the incident to law enforcement, conducted a review, and is offering 24 months of free credit monitoring and fraud assistance via TransUnion/Cyberscout.
Leak gap clock✗ Leak >180d13 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
A leak claim by bianlian about this victim predates this filing by 444 days.View originating leak claim
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376810.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 23, 2026
- Raw hash
- fdc9db72e900270a0ca26f5f8ca2940a34993662c50ab12e4a64a92f5ca2ed7b
Reporting entity
- Name
- The Civic Committeenorm: the civic committee
- Domain
- civiccommittee.org
Victim entity
- Name
- The Civic Committeenorm: the civic committee
- Domain
- civiccommittee.org
Incident
- Discovered
- Mar 21, 2025
- Materiality determined
- —
- Notification sent
- Mar 27, 2025
- Affected individuals
- 1
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- report the incident to law enforcement
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 13 months(398 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.