HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTHighContained
Grandison Management, Inc / Towne Home Care LLC
bd_f6171248af8148a9 · schema v1 · pii pii-v1
Full breach record for Grandison Management, Inc / Towne Home Care LLC →Grandison Management, Inc. / Towne Home Care, LLC reported an external system breach (hacking) occurring on May 15, 2021, discovered on January 4, 2022. The incident compromised the personal information and financial account numbers of 100,488 individuals, including 5 Maine residents. The entity provided written notification on February 8, 2022, and offered 12 months of credit monitoring, insurance, and ID theft recovery services through Kroll.
Maine clockDiscovered Jan 4, 2022 → Filed with AG Mar 22, 202277d ⏱ ME AG >30d11 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_819ea73189faf00dMontana State AGfiled 2022-02-08(42d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/079706b6-2530-4e52-9df6-9b345c259d24.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 22, 2022
- Raw hash
- 32d19c86cc28ec4c5470b98e715d8e2526e5831db242291e95a22233200b197a
Reporting entity
- Name
- Grandison Management, Inc / Towne Home Care LLCnorm: grandison management inc towne home care
Victim entity
- Name
- Grandison Management, Inc / Towne Home Care LLCnorm: grandison management inc towne home care
Incident
- Discovered
- Jan 4, 2022
- Materiality determined
- —
- Notification sent
- Feb 8, 2022
- Affected individuals
- 100,488
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 11 weeks(77 days from discovery to filing)
- Compliance flags
- ME AG >30d · 77d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 4, 2022→ Filed with AG: Mar 22, 202277d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.