Social EngineeringPhishingCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
GLAUKOS Corp
bd_f97abf96eb542eee · schema v1 · pii pii-v1
Full breach record for GLAUKOS Corp →Glaukos Corp. reported a data breach resulting from an email phishing attack. The incident affected 905 individuals, including 2 Maine residents, with data acquired including names and financial account numbers (credit/debit card numbers with security codes/PINs). The breach occurred on October 9, 2021, was discovered on February 17, 2021, and written notification was sent on March 12, 2021. Identity theft protection services were offered to affected individuals.
Maine clockDiscovered Feb 17, 2021 → Filed with AG Mar 12, 202123d ✓ ME AG ≤30d23 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed905 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c3eb57cd-81a0-4bf8-84d2-91ff19424468.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 12, 2021
- Raw hash
- 8a4c0189c52a45d1128cb1c696786983729e082ea9c6775a95e75c6a908058d8
Reporting entity
- Name
- GLAUKOS Corpnorm: glaukos
Victim entity
- Name
- GLAUKOS Corpnorm: glaukos
Incident
- Discovered
- Feb 17, 2021
- Materiality determined
- —
- Notification sent
- Mar 12, 2021
- Affected individuals
- 905
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- ExternalFinancial
- Initial access
- phishing_link
Compliance
- Time to disclose
- 23 days(23 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 23d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 17, 2021→ Filed with AG: Mar 12, 202123d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.