HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Frost & Sullivan
bd_e4520694f1251272 · schema v1 · pii pii-v1
Full breach record for Frost & Sullivan →Frost & Sullivan, Inc. reported an external system breach (hacking) occurring on March 10, 2023, discovered on August 8, 2023. The incident affected 279 individuals, including 2 Maine residents. Personal information acquired included names and Social Security Numbers. The company provided written notification and offered 24 months of credit monitoring and identity restoration services through Experian.
Leak gap clock⏱ Leak >30d28 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 4 about the same incident.View merged incident
A leak claim by akira about this victim predates this filing by 39 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_184a8b1f0d889d98Montana State AGfiled 2023-09-05Candidate
- bd_407c587322cd8972New Hampshire State AGfiled 2023-09-05Verified
- bd_f51afad63d17b41eVermont State AGfiled 2023-09-05Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f4771cf0-3a56-4d10-a170-65d600d9963d.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 5, 2023
- Raw hash
- 940fc845f136b53beb0097c7e11766ab05f82e458290ef558784acaf65714678
Reporting entity
- Name
- Frost & Sullivannorm: frost sullivan
- Domain
- frost.com
Victim entity
- Name
- Frost & Sullivannorm: frost sullivan
- Domain
- frost.com
Incident
- Discovered
- Aug 8, 2023
- Materiality determined
- —
- Notification sent
- Sep 5, 2023
- Affected individuals
- 279
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- Leak >30dME AG ≤30d · 28d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 8, 2023→ Filed with AG: Sep 5, 202328d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.