HackingHacking OtherCustomer Data InvolvedPIILowContained
The Episcopal Church
bd_e7d214e043ade00a · schema v1 · pii pii-v1
Full breach record for The Episcopal Church →The Episcopal Church Foundation, a non-profit organization, reported a data breach to the Maine Attorney General, indicating that an external system breach (hacking) occurred between February 7, 2025, and February 17, 2025. The breach was discovered on February 17, 2025, and affected 13 Maine residents. The organization began notifying affected individuals on July 28, 2025, and offered 24 months of three-bureau credit monitoring and identity monitoring and restoration services through TransUnion.
Maine clockDiscovered Feb 17, 2025 → Filed with AG Jul 28, 2025161d ✗ ME AG >90d23 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_5e0ac4f183a6bec1Vermont State AGfiled 2025-07-28Verified
- bd_94b5f0476cdd0a6aIndiana State AGfiled 2025-07-28Verified
- bd_faa9bfc58c889769New Hampshire State AGfiled 2025-07-30(2d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/4877c9d1-ae26-4b56-b342-824cf7318c4b.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 28, 2025
- Raw hash
- 130ae6d2e29e5550927db5249c5e6674b05151322146c4cd6ae3f4979bea4c92
Reporting entity
- Name
- The Episcopal Churchnorm: the episcopal church
- Domain
- episcopalchurch.org
Victim entity
- Name
- The Episcopal Churchnorm: the episcopal church
- Domain
- episcopalchurch.org
Incident
- Discovered
- Feb 17, 2025
- Materiality determined
- —
- Notification sent
- Jul 28, 2025
- Affected individuals
- 13
- Data types
- PII
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 23 weeks(161 days from discovery to filing)
- Compliance flags
- ME AG >90d · 161dME resident >60d · 161d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 17, 2025→ Filed with AG: Jul 28, 2025161d 90 days ME AG >90d Maine Discovered: Feb 17, 2025→ Notified: Jul 28, 2025161d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.