HackingStolen CredentialsDelayed DiscoveryCREDENTIALSLowContained
American Bar Association
bd_ebe4be8808814e12 · schema v1 · pii pii-v1
Full breach record for American Bar Association →The American Bar Association (ABA) notified individuals of a data breach where an unauthorized third party gained access to its network starting March 6, 2023. The incident compromised usernames and hashed, salted passwords for accounts on the old ABA website (pre-2018) and the ABA Career Center (post-2018). The ABA activated its incident response plan, retained cybersecurity experts, and removed the unauthorized party. No plain-text passwords were exposed. Notification was sent to affected individuals, including a specific count for Rhode Island residents (4,856).
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_a594d6029eaa462fCalifornia State AGfiled 2023-04-20Candidate
- bd_1919aeff1b67bdfcWashington State AGfiled 2023-04-21(1d gap)Verified
- bd_9b4a53df43e28d25Oregon State AGfiled 2023-04-21(1d gap)Verified
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2023/05/Sample-ABA-Consumer-Notification-Letter51.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 20, 2023
- Raw hash
- 94dd39bc956495a16a761cd6fb20af4ccc83ebdc104f86ec22bc7f53c3c27f51
Reporting entity
- Name
- American Bar Associationnorm: american bar
- Domain
- americanbar.org
Victim entity
- Name
- American Bar Associationnorm: american bar
- Domain
- americanbar.org
Incident
- Discovered
- Mar 17, 2023
- Materiality determined
- —
- Notification sent
- May 17, 2023
- Affected individuals
- Not disclosed
- Data types
- CREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 5 weeks(34 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.