DisclosureLens
HackingInformationCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsMediumResolved

Research Center for Children, Youth & Families

bd_fa58b4483ae61e1d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 15, 2022

Filed

Sep 19, 2022

To disclose

4 days

Affected · nationwide

1,47023 in this filing

Linked

5 filings

Confidence

50%
Full breach record for Research Center for Children, Youth & Families →

Research Center for Children, Youth & Families, Inc. experienced an external system breach (hacking) that occurred between September 18, 2020, and February 3, 2022. The breach was discovered on September 15, 2022. The compromised information includes names in combination with financial account numbers or credit/debit card numbers along with their security codes, access codes, passwords, or PINs. A total of 23 Maine residents were affected.

Maine clockDiscovered Sep 15, 2022 → Filed with AG Sep 19, 20224d ✓ ME AG ≤30d4 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 727 days
discovery → filing · 4 days

Sep 18, 2020

Begins

Sep 15, 2022

Discovered

Sep 19, 2022

Filed

This filing is one of 5 about the same incident.View merged incident
Part of FreeStyle Solutions supply-chain incident (2022) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Maine State AGSep 19 · first · this page
New Hampshire State AG+2d
Indiana State AG+2d
Montana State AG+2d
Massachusetts State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.