Data Breach Notifications

Entity Information

  • Type of Organization: Non-Profit
  • Entity Name: Portland Museum of Art
  • Street Address: 7 Congress Square
  • City: Portland
  • State, or Country if outside the US: Maine
  • Zip Code: 04101

Submitted By

  • Name: Michael Brown
  • Title: Director of Campus Sustainability
  • Firm name (if different than entity):
  • Telephone Number: 207-415-6920
  • Email Address: mbrown@portlandmuseum.org
  • Relationship to entity whose information was compromised: Recently hired to oversee the Maintenance, Custodial, Facilities and IT Departments

Breach Information

  • Total number of persons affected (including residents): 34 total
  • Total number of Maine residents affected: 29 (four currently live out of state, and one person is deceased)
  • If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified:
  • Date(s) Breach Occured: 01/21/2021
  • Date Breach Discovered: 01/22/2021
  • Description of the Breach:
    • Other
    • If other, please specify: Email account of an employee was accessed - but we could not determine if it was phishing, hacking, or from a prior device. Email account was used to send spam causing it to be flagged. Contained in the archives of the account was an authorized driver list for the Museum from 2013.
  • Information Acquired - Name or other personal identifier in combination with: Driver's License Number or Non-Driver Identification Card Number

Notification and Protection Services

  • Type of Notification: Written
  • Date(s) of consumer notification: 03/05/2022 (email notices also sent to current employees on 2/28/22)
  • Copy of notice to affected Maine residents: Final Updated Notification ltr_draft - Portland Museum of Art.v2 CLEAN(267472161.2).docx
  • Date of any previous (within 12 months) breach notifications:
  • Were identity theft protection services offered: Yes
  • If yes, please provide the duration, the provider of the service and a brief description of the service: A one year subscription to Kroll's Identity Theft Monitoring Service has been purchased on each person's behalf