HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Our Sunday Visitor
bd_e0b653117783ff59 · schema v1 · pii pii-v1
Full breach record for Our Sunday Visitor →Our Sunday Visitor, Inc. reported an external system breach (hacking) occurring on March 8, 2023, discovered on May 4, 2023. The incident compromised names and Social Security Numbers of 2,743 individuals, including 2 Maine residents. The organization notified affected individuals in writing on May 16, 2023, and provided 24 months of credit monitoring and identity theft restoration services through Experian.
Maine clockDiscovered May 4, 2023 → Filed with AG May 16, 202312d ✓ ME AG ≤30d12 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_40ad612b49bf4f37Leak Sitekarakurtfiled 2023-04-29(17d gap)Verified by operator
Regulatory filings (4) · sorted by filing gap
- bd_2be84b2311d16275Montana State AGfiled 2023-05-16Verified by operator
- bd_f0e598c1cc02e1b2Vermont State AGfiled 2023-05-16Verified by operator
- bd_f9a334fa7897f597HHS OCRfiled 2023-05-05(11d gap)Verified
- bd_6756c2b7f28bf89dVermont State AGfiled 2023-09-22(129d gap)Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/7a3c9fe4-5be4-43ee-91ea-5ef1fccedcbc.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 16, 2023
- Raw hash
- 71d4ef73734abe03561229f819106b97955b7e63c1f877f670f6f729dec903d5
Reporting entity
- Name
- Our Sunday Visitornorm: our sunday visitor
- Domain
- oursundayvisitor.com
Victim entity
- Name
- Our Sunday Visitornorm: our sunday visitor
- Domain
- oursundayvisitor.com
Incident
- Discovered
- May 4, 2023
- Materiality determined
- —
- Notification sent
- May 16, 2023
- Affected individuals
- 2,743
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 12 days(12 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 12d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 4, 2023→ Filed with AG: May 16, 202312d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.