DisclosureLens
HackingHealthcareProfessional ServicesHealthcareStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedGovernment IDIdentity (basic)PIIMediumContained

Career Journeys

bd_e3fcdeb310e089aa · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 8, 2023

Filed

Aug 9, 2023

To disclose

≤1 day

Affected

68state residents only

Confidence

66%
Full breach record for Career Journeys

Career Journeys, an employment services provider in Saco, Maine, reported a cybersecurity incident on August 7, 2023. An unauthorized user gained access to the organization's Microsoft Office 365 account. The breach affected 68 individuals, including 30 with Medicaid and Social Security numbers on file, and others with contact and driver's license information. The breach was discovered on August 8, 2023, and notification was sent on August 9, 2023. Response actions included deleting the unauthorized user, checking for malicious activity, and filing a police report.

Maine clockDiscovered Aug 8, 2023Filed with AG Aug 9, 20231d ME AG ≤30d≤1 day discovery → filing
AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 1 days
discovery → filing · ≤1 day / 1 days

Aug 7, 2023

Begins

Aug 8, 2023

Discovered

Aug 9, 2023

Filed

vs. sector median

12 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed68 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.