Maine data breach notifications

Persons who maintain personal information of Maine residents must notify the resident and the Maine Attorney General following discovery of a breach. Maine has the lowest population threshold (any single resident affected), making it historically the highest-volume state portal in the US.

How DisclosureLens indexes Maine filings

DisclosureLens polls the Maine AG portal on a regular schedule, fetches each new notice, extracts a structured BreachDisclosure v1 record, resolves the affected entity to its LEI/CIK when possible, and publishes via the REST API (webhooks and STIX/TAXII delivery are planned).

Portal currently offline. The Maine AG took its public breach database offline in mid-2026; DisclosureLens retains the complete archive it had ingested through that point. New Maine filings are paused until the portal resumes; the main DisclosureLens feed continues to cover SEC, HHS OCR, the other US state AGs, and international DPAs.

Extraction provenance

Extracted records carry per-field source citations into the Maine AG notice they came from, plus a per-record confidence score and a full extraction audit trail. Maine filings inherit the same BreachDisclosure v1 schema as SEC 8-Ks, HHS OCR notices, and EU DPA registers — same fields, same provenance metadata, deduped against same-incident filings in other jurisdictions. Full pipeline details: Sources & Methodology.

Statute

10 M.R.S. § 1346 et seq.

Authoritative source

https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/list.html

Corrections

Email corrections@disclosurelens.com — 48-hour SLA from receipt.