DisclosureLens
HackingProfessional ServicesProfessional ServicesData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)HighContained

The Arc of Chester County

bd_fa8e11bb6713d8b9 · schema v1 · pii pii-v1

Severity

High

Discovered

Sep 14, 2020

Filed

Feb 10, 2021

To disclose

21 weeks

Affected · nationwide

2,7261 in this filing

Confidence

65%
Full breach record for The Arc of Chester County →2 incidents on file

The Arc of Chester County, a Pennsylvania-based non-profit, reported an external system breach occurring on March 12, 2020, discovered on September 14, 2020. The incident affected 2,726 individuals, including one Maine resident. The attacker acquired names and driver's license numbers. The organization provided 12 months of credit monitoring and identity restoration services through TransUnion.

Maine clockDiscovered Sep 14, 2020 → Filed with AG Feb 10, 2021149d ✗ ME AG >90d21 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 186 days
discovery → filing · 21 weeks / 149 days

Mar 12, 2020

Begins

Sep 14, 2020

Discovered

Feb 10, 2021

Filed

vs. sector median

+4 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2,726 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.