HackingSupply Chain (3P Vendor)Customer Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
M. Arthur Gensler Jr. & Associates, Inc.
bd_f7fd0d0d98414d29 · schema v1 · pii pii-v1
Full breach record for M. Arthur Gensler Jr. & Associates, Inc. →M. Arthur Gensler, Jr. & Associates, Inc. reported a third-party data breach that occurred from May 15, 2023, to May 31, 2023. The incident was discovered on June 23, 2023, and involved the acquisition of names and Social Security numbers. The company notified affected individuals on August 9, 2023, and offered two years of credit monitoring and identity restoration services.
Maine clockDiscovered Jun 23, 2023 → Filed with AG Aug 17, 202355d ⏱ ME AG >30d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_2d48359ec9022072California State AGfiled 2023-08-09(8d gap)Candidate
- bd_e71a88311b2e2220New Hampshire State AGfiled 2023-07-25(23d gap)Verified
- bd_904ab57c2f95240fVermont State AGfiled 2023-07-07(41d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/2e534009-1db5-498b-a569-d43370e80a0a.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 17, 2023
- Raw hash
- 2c28a0a01fac59fb14bdd1a4b27a1b0715abbd131491f9e48a822cadca46dc8a
Reporting entity
- Name
- M. Arthur Gensler Jr. & Associates, Inc.norm: m arthur gensler jr associates
Victim entity
- Name
- M. Arthur Gensler Jr. & Associates, Inc.norm: m arthur gensler jr associates
Incident
- Discovered
- Jun 23, 2023
- Materiality determined
- —
- Notification sent
- Aug 9, 2023
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- Partner
Compliance
- Time to disclose
- 8 weeks(55 days from discovery to filing)
- Compliance flags
- ME AG >30d · 55d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 23, 2023→ Filed with AG: Aug 17, 202355d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.