HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Windstream Holdings II, LLC
bd_e9f1d74e2f32d390 · schema v1 · pii pii-v1
Full breach record for Windstream Holdings II, LLC →Windstream Holdings II, LLC reported an external system breach (hacking) occurring between July 11, 2020, and August 23, 2020, discovered on October 12, 2020. The incident compromised the names and driver's license numbers of 7,304 individuals, including 14 Maine residents. Windstream provided written notification on November 18, 2020, and offered two years of Experian credit monitoring and identity restoration services.
Maine clockDiscovered Oct 12, 2020 → Filed with AG Nov 18, 202037d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_2bb6bdb58b9d1751California State AGfiled 2020-11-18Verified
- bd_4f4b2f12322c63c0Montana State AGfiled 2020-11-18Candidate
- bd_bfa2737f8a293407Washington State AGfiled 2020-11-18Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1e6222ac-4af4-45ee-abf7-5d8ccd4cb16d.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 18, 2020
- Raw hash
- a796dd93c8ca5ccdf674ded93200606c80a0e0b0e8032cf8cd437f1ca846f51c
Reporting entity
- Name
- Windstream Holdings II, LLCnorm: windstream holdings ii
Victim entity
- Name
- Windstream Holdings II, LLCnorm: windstream holdings ii
Incident
- Discovered
- Oct 12, 2020
- Materiality determined
- —
- Notification sent
- Nov 18, 2020
- Affected individuals
- 7,304
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 5 weeks(37 days from discovery to filing)
- Compliance flags
- ME AG >30d · 37d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 12, 2020→ Filed with AG: Nov 18, 202037d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.