Data Breach Notifications

Entity Information

  • Type of Organization: Healthcare
  • Entity Name: Career Journeys
  • Street Address: 13 Bonython Ave
  • City: Saco
  • State, or Country if outside the US: Me
  • Zip Code: 04072

Submitted By

  • Name: Scott Simonds
  • Title: Owner / Director
  • Firm name (if different than entity):
  • Telephone Number: 207 408-3294
  • Email Address: Scott.Simonds@CareerJourneys.me
  • Relationship to entity whose information was compromised: Employment Services Provider

Breach Information

  • Total number of persons affected (including residents): 68
  • Total number of Maine residents affected: 68
  • If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified:
  • Date(s) Breach Occured: 08/7/2023
  • Date Breach Discovered: 08/08/2023
  • Description of the Breach:
    • Loss or theft of device or media (computer, laptop, external hard drive, thumb drive, CD, tape, etc.), External system breach (hacking)
  • Information Acquired - Name or other personal identifier in combination with: Driver's License Number or Non-Driver Identification Card Number

Notification and Protection Services

  • Type of Notification: Electronic
  • Date(s) of consumer notification: 08/09/2023
  • Copy of notice to affected Maine residents: Career Journeys Information Breach.docx
  • Date of any previous (within 12 months) breach notifications:
  • Were identity theft protection services offered: Yes
  • If yes, please provide the duration, the provider of the service and a brief description of the service: I, Scott Simonds, called Microsoft on the 8th of August, the same day I discovered the unauthorized user. I deleted the user. The technician went through our Office 365 and Microsoft operating system to detect whether there was any malicious software or activity. There was no activity by the user who, according to his account, had set up the fake acount the previous evening. Although the potential for a information to have been compromized, it appears that he hadn't gotten around to it before it was caught and dealt with. I filed a police report immediately after and gave them the email address the intruder used to get in to my account. Note that I provide employment services. Of the 68, 30 had Medicaid and Social Security numbers on file. The rest had contact information and driver licence information (due to two different employment services)