HackingCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
American Meteorological Society, Inc.
bd_e6c548a44be5df27 · schema v1 · pii pii-v1
Full breach record for American Meteorological Society, Inc. →The American Meteorological Society experienced an external system breach (hacking) on August 9, 2023. The incident affected 557 individuals, including 5 Maine residents. The attacker acquired names and personal identifiers in combination with financial account or credit/debit card numbers (including security codes, access codes, passwords, or PINs). The Society provided written notification on December 14, 2023, and offered 12 months of credit, identity, and dark web monitoring, along with fraud insurance and a call center.
Maine clockDiscovered Aug 9, 2023 → Filed with AG Dec 15, 2023128d ✗ ME AG >90d18 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
A leak claim by cactus about this victim predates this filing by 148 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_568a5325102af8f4Leak Sitecactusfiled 2023-07-20(148d gap)Verified by operator
Regulatory filings (2) · sorted by filing gap
- bd_37660df843cc34e3Vermont State AGfiled 2023-12-14(1d gap)Verified
- bd_b970b0b0dbd5b2a9Montana State AGfiled 2023-12-14(1d gap)Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0c359484-5b5f-45ec-a1f5-9ceccec0b442.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 15, 2023
- Raw hash
- 030b9981bb442c2ed5cf524a92fa178a789ef50c2eb7ed7543bb93c1eb205e90
Reporting entity
- Name
- American Meteorological Society, Inc.norm: american meteorological society
Victim entity
- Name
- American Meteorological Society, Inc.norm: american meteorological society
Incident
- Discovered
- Aug 9, 2023
- Materiality determined
- —
- Notification sent
- Dec 14, 2023
- Affected individuals
- 557
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 18 weeks(128 days from discovery to filing)
- Compliance flags
- ME AG >90d · 128dME resident >60d · 127dLeak >90d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 9, 2023→ Filed with AG: Dec 15, 2023128d 90 days ME AG >90d Maine Discovered: Aug 9, 2023→ Notified: Dec 14, 2023127d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.