HackingSupply Chain (3P Vendor)Delayed DiscoveryCustomer Data InvolvedMedium
Little Hill Foundation for the Rehabilitation of Alcoholics, Inc.
bd_f12e30a7257222b5 · schema v1 · pii pii-v1
Full breach record for Little Hill Foundation for the Rehabilitation of Alcoholics, Inc. →Little Hill Foundation for the Rehabilitation of Alcoholics, Inc. (Alina Lodge) reported a data breach originating from a third-party vendor. The incident occurred on May 1, 2020, and was discovered on October 15, 2020. The breach affected 2,565 individuals, who were notified on June 16, 2021. The organization offered 12 months of complimentary credit monitoring and identity theft protection services through TransUnion Interactive to those affected.
Maine clockDiscovered Oct 15, 2020 → Filed with AG Jun 16, 2021244d ✗ ME AG >90d35 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_2a3c55c9d6af4d68Maine State AGfiled 2021-06-16Verified
- bd_a19ff214f5c585b8HHS OCRfiled 2021-06-16Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e9106a0a-9588-46ae-855d-eb412968a0f4.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 16, 2021
- Raw hash
- fb0fb49d1864109732aa65946cd5f39338c0a7b154ef6cfb728a54d3e3673515
Reporting entity
- Name
- Little Hill Foundation for the Rehabilitation of Alcoholics, Inc.norm: little hill foundation for the rehabilitation of alcoholics
Victim entity
- Name
- Little Hill Foundation for the Rehabilitation of Alcoholics, Inc.norm: little hill foundation for the rehabilitation of alcoholics
Incident
- Discovered
- Oct 15, 2020
- Materiality determined
- —
- Notification sent
- Jun 16, 2021
- Affected individuals
- 2,565
- Data types
- —
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- Partner
Compliance
- Time to disclose
- 35 weeks(244 days from discovery to filing)
- Compliance flags
- ME AG >90d · 244dME resident >180d · 244d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 15, 2020→ Filed with AG: Jun 16, 2021244d 90 days ME AG >90d Maine Discovered: Oct 15, 2020→ Notified: Jun 16, 2021244d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.