HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Serco Inc.
bd_f4de1dd0ef969c2e · schema v1 · pii pii-v1
Full breach record for Serco Inc. →Serco, Inc. reported an external system breach (hacking) occurring on May 31, 2023, discovered on July 3, 2023. The incident affected 10,140 individuals, including 39 Maine residents. Personal information acquired included names and Social Security Numbers. Serco provided written notification on August 1, 2023, and offered one year of complimentary identity theft protection and credit monitoring through NortonLifeLock.
Leak gap clock✗ Leak >180d4 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 2 about the same incident.View merged incident
A leak claim by babuk about this victim predates this filing by 1011 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_d3f7882faca3c5b5California State AGfiled 2023-08-02Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c7adbabd-3bf5-480c-97d1-ea15fb68fa10.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 2, 2023
- Raw hash
- de4d98daa8062dae750caae397397a34877705e42093777405aee7c1a2281aac
Reporting entity
- Name
- Serco Inc.norm: serco
- Domain
- serco.com
Victim entity
- Name
- Serco Inc.norm: serco
- Domain
- serco.com
Incident
- Discovered
- Jul 3, 2023
- Materiality determined
- —
- Notification sent
- Aug 1, 2023
- Affected individuals
- 10,140
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- Leak >180dME AG ≤30d · 30d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 3, 2023→ Filed with AG: Aug 2, 202330d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.