HackingVulnerability ExploitSupply Chain (Dependency)Data ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTPIIMedium
Data Media Associates
bd_dd8d071e11b9229b · schema v1 · pii pii-v1
Full breach record for Data Media Associates →Data Media Associates, LLC was impacted by the MOVEit vulnerability exploit between May 31 and June 1, 2023. The breach was discovered on June 30, 2023, and exposed the names and Social Security numbers of 133 Maine residents. The company offered affected individuals 12 months of identity theft protection services.
Maine clockDiscovered Jun 30, 2023 → Filed with AG Sep 25, 202387d ⏱ ME AG >30d12 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_5fe69a1c32fcae1bWashington State AGfiled 2023-09-25Verified
- bd_54c0ed94f9613269HHS OCRfiled 2023-10-09(14d gap)Verified
- bd_44951a0ed5c0c1c7California State AGfiled 2023-08-23(33d gap)Verified
- bd_b6d2939432620ba9Delaware State AGfiled 2023-08-23(33d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 33d gap
- bd_f47ab4ae0c5fc070Maine State AGfiled 2023-08-23(33d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/fac34f70-156c-40f2-af7d-80dbb91b6080.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 25, 2023
- Raw hash
- 49335cd46317eb2b08c54675bf8d5c4d62f155d716c4385441ee75e640dcf2fa
Reporting entity
- Name
- Data Media Associatesnorm: data media associates
Victim entity
- Name
- Data Media Associatesnorm: data media associates
Incident
- Discovered
- Jun 30, 2023
- Materiality determined
- —
- Notification sent
- Aug 23, 2023
- Affected individuals
- 133
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1195 Supply Chain Compromise
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 12 weeks(87 days from discovery to filing)
- Compliance flags
- ME AG >30d · 87d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 30, 2023→ Filed with AG: Sep 25, 202387d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.