Social EngineeringPhishingCustomer Data InvolvedDelayed DiscoverySupply Chain (3P Vendor)Identity (basic)Government IDCriticalContained

focusIT, Inc

bd_ebe2aa484d17951c · schema v1 · pii pii-v1

Severity

Critical

Discovered

Aug 2, 2022

Filed

Sep 30, 2022

To disclose

8 weeks

Affected · nationwide

147,799488 in this filing

Linked

10 filings

Confidence

65%

Full breach record for focusIT, Inc →

focusIT, Inc. reported a data breach affecting 488 Maine residents after a phishing incident. The breach occurred between June 1, 2022, and August 3, 2022, and was discovered on August 2, 2022. The compromised information includes names and Social Security numbers. Impacted individuals were notified on September 28, 2022, and offered 12 months of credit monitoring services through Equifax. The breach was described as an external system breach via hacking.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Aug 2, 2022 → Filed with AG Sep 30, 202259d ⏱ ME AG >30d8 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 62 days

discovery → filing · 8 weeks / 59 days

Jun 1, 2022

Begins

Aug 2, 2022

Discovered

Sep 30, 2022

Filed

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Washington State AGbd_1c71a9b8a3fa10512022-09-30Verified
Oregon State AGbd_45a661a492b146b52022-09-30Verified
California State AGbd_54d36976270d5b762022-09-30Verified
Indiana State AGbd_0634fa54edfda7e32022-09-29 · +1dVerified

Show 5 more filings ↓up to 3d gap

Massachusetts State AGbd_28bf2140c7ab07672022-09-29 · +1dVerified
New Hampshire State AGbd_55a4b243f663675a2022-09-29 · +1dVerified
Delaware State AGbd_9e053a4f72bbc71f2022-09-29 · +1dVerified
Montana State AGbd_ffe5901a07fbecd32022-09-29 · +1dVerified
South Carolina State AGbd_02967c397059620e2022-10-03 · +3dVerified

Name: focusIT, Inc
norm: focusit
Domain: focusitinc.com

Name: focusIT, Inc
norm: focusit
Domain: focusitinc.com

Discovered: Aug 2, 2022
Breach occurred: Jun 1, 2022 – Aug 3, 2022
Undetected for: 62 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 28, 2022
Affected individuals: 147,799state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566 Phishing
Threat actor: External

During the incident: Offered 12 months of credit monitoring and identity protection services through Equifax
Sent written notification to affected consumers
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(59 days from discovery to filing)
Compliance flags: ME AG >30d · 59d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Aug 2, 2022
→ Filed with AG: Sep 30, 2022
59d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Aug 2, 2022 → Filed with AG: Sep 30, 2022	59d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 10 states

View merged incident ↗

Indiana State AGSep 29 · first

Massachusetts State AGSep 29 · first

New Hampshire State AGSep 29 · first

Delaware State AGSep 29 · first

Montana State AGSep 29 · first

Washington State AG+1d

Oregon State AG+1d

California State AG+1d

Maine State AG+1d · this page

South Carolina State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f7a54169-98e6-47b4-9f66-fb33ebe0c1ee.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 30, 2022
Raw hash: c85300cb8bf81d5aa37681ab2b387387f8d299678c8d173e6f5c3c8f37eafabb

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityfocusIT, Inc

Victim entityfocusIT, Inc

Incidentdiscovered Aug 2, 2022

Stated responseOffered 12 months of credit monitoring and identity protection services through Equifax

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov