HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTCriticalResolved
Indianapolis Housing Agency Inc.
bd_fba4e88bebf161bd · schema v1 · pii pii-v1
Full breach record for Indianapolis Housing Agency Inc. →Indianapolis Housing Agency reported an external system breach (hacking) occurring on September 23, 2022, discovered on October 4, 2022. The incident compromised names and Social Security Numbers of approximately 212,910 individuals, including 9 Maine residents. Notification was sent on January 23, 2023, with 12 months of identity theft protection services offered.
Maine clockDiscovered Oct 4, 2022 → Filed with AG Jan 25, 2023113d ✗ ME AG >90d16 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_03b183385c2606c8New Hampshire State AGfiled 2023-01-25Verified
- bd_31947650ec10a382Maine State AGfiled 2023-01-25Verified
- bd_a5cc1ed89b344fbcMontana State AGfiled 2023-01-25Candidate
- bd_09c333c1cc6841d7Vermont State AGfiled 2023-01-23(2d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0630de66-2cd4-4da1-a090-84ae591e1a80.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 25, 2023
- Raw hash
- e22cb1dcfcbd7f863ffb17d6ae8e0d7fd37cedad1778598eef7c9a62707e7ef8
Reporting entity
- Name
- ICE MILLER LLPnorm: ice miller
- Industry
- legal_services
Victim entity
- Name
- Indianapolis Housing Agency Inc.norm: indianapolis housing agency
- Industry
- government_public
Incident
- Discovered
- Oct 4, 2022
- Materiality determined
- —
- Notification sent
- Jan 23, 2023
- Affected individuals
- 212,910
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notification with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 16 weeks(113 days from discovery to filing)
- Compliance flags
- ME AG >90d · 113dME resident >60d · 111d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 4, 2022→ Filed with AG: Jan 25, 2023113d 90 days ME AG >90d Maine Discovered: Oct 4, 2022→ Notified: Jan 23, 2023111d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.