HackingCustomer Data InvolvedTargetedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Greater New York Mutual Insurance Company
bd_eaf31a6c03fc6578 · schema v1 · pii pii-v1
Full breach record for Greater New York Mutual Insurance Company →Greater New York Mutual Insurance Company reported an external system breach (hacking) occurring on 05/23/2021 and discovered on 06/01/2021. The incident compromised names and driver's license numbers of 33,959 individuals, including 41 Maine residents. The company provided 24 months of credit monitoring and identity theft insurance through CyberScout.
Maine clockDiscovered Jun 1, 2021 → Filed with AG Oct 18, 2021139d ✗ ME AG >90d20 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_44cd6334c0c926b1Montana State AGfiled 2021-10-19(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/141dee36-15aa-4f37-afdf-0c3212fe02d1.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 18, 2021
- Raw hash
- c7c367d6dd9bf866738af11244dfb960e9f62e66dbb4948ba9f139f50296a204
Reporting entity
- Name
- Greater New York Mutual Insurance Companynorm: greater new york mutual insurance
Victim entity
- Name
- Greater New York Mutual Insurance Companynorm: greater new york mutual insurance
Incident
- Discovered
- Jun 1, 2021
- Materiality determined
- —
- Notification sent
- Oct 22, 2021
- Affected individuals
- 33,959
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 20 weeks(139 days from discovery to filing)
- Compliance flags
- ME AG >90d · 139dME resident >60d · 143d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 1, 2021→ Filed with AG: Oct 18, 2021139d 90 days ME AG >90d Maine Discovered: Jun 1, 2021→ Notified: Oct 22, 2021143d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.