HackingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICPIIMediumContained
Career Journeys
bd_e3fcdeb310e089aa · schema v1 · pii pii-v1
Full breach record for Career Journeys →Career Journeys, an employment services provider in Saco, Maine, reported a cybersecurity incident on August 7, 2023. An unauthorized user gained access to the organization's Microsoft Office 365 account. The breach affected 68 individuals, including 30 with Medicaid and Social Security numbers on file, and others with contact and driver's license information. The breach was discovered on August 8, 2023, and notification was sent on August 9, 2023. Response actions included deleting the unauthorized user, checking for malicious activity, and filing a police report.
Maine clockDiscovered Aug 8, 2023 → Filed with AG Aug 9, 20231d ✓ ME AG ≤30d≤1 day discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed68 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ca8801ab-e3cb-4b79-a5c3-023965d1aafb.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 9, 2023
- Raw hash
- c38cceee58259e17a763c7515691a7759d634744f62f45be7ebf300aefc54f1e
Reporting entity
- Name
- Career Journeysnorm: career journeys
- Domain
- careerjourneys.org
- Industry
- Employment Services
Victim entity
- Name
- Career Journeysnorm: career journeys
- Domain
- careerjourneys.org
- Industry
- Employment Services
Incident
- Discovered
- Aug 8, 2023
- Materiality determined
- —
- Notification sent
- Aug 9, 2023
- Affected individuals
- 68
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- ≤1 day(1 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 1d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 8, 2023→ Filed with AG: Aug 9, 20231d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.