DisclosureLens
HackingHealthcareHealthcareCustomer Data InvolvedIdentity (basic)Government IDHigh

Episcopal Retirement Services Foundation

bd_dd970ac7a489825c · schema v1 · pii pii-v1

Severity

High

Discovered

Sep 24, 2021

Filed

Nov 18, 2021

To disclose

8 weeks

Affected · nationwide

4,1332 in this filing

Linked

5 filings

Confidence

50%
Full breach record for Episcopal Retirement Services Foundation →

Episcopal Retirement Services reported a data breach affecting 2 Maine residents. The breach, which was discovered on September 24, 2021, involved an external system breach (hacking). The compromised information includes names and Social Security numbers. Affected individuals were notified on November 19, 2021, and offered one year of credit monitoring and identity theft services through Sontiq.

Maine clockDiscovered Sep 24, 2021 → Filed with AG Nov 18, 202155d ⏱ ME AG >30d8 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 8 weeks / 55 days

Sep 24, 2021

Begins

Sep 24, 2021

Discovered

Nov 18, 2021

Filed

vs. sector median

5 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
HHS OCRNov 18 · first
Massachusetts State AGNov 18 · first
Maine State AGNov 18 · first · this page
Indiana State AG+1d
Montana State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.