HackingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumResolved
The Hartz Mountain Corporation
bd_009ebf5999848b6c · schema v1 · pii pii-v1
Full breach record for The Hartz Mountain Corporation →On March 7, 2024, The Hartz Mountain Corporation detected unexpected activity within its computer systems. Investigation confirmed that an unauthorized external actor accessed the system and viewed or exfiltrated data. On October 7, 2024, Hartz confirmed that 5 Maine residents were affected. Compromised data included names and Social Security numbers. Written notification was sent to affected individuals on October 18, 2024. No identity theft protection services were offered.
Leak gap clock✗ Leak >180d11 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
A leak claim by play about this victim predates this filing by 225 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_9e066c177e21348aLeak Siteplayfiled 2024-03-07(225d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f669d624-7761-43a3-82f0-bb7e357a78f6.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 18, 2024
- Raw hash
- d6e1a850e7449f831b259ff27d554cf676b17566a4dc9380df6f93555d424be3
Reporting entity
- Name
- The Hartz Mountain Corporationnorm: the hartz mountain
- Domain
- hartz.com
- Industry
- Other Commercial
Victim entity
- Name
- The Hartz Mountain Corporationnorm: the hartz mountain
- Domain
- hartz.com
- Industry
- Other Commercial
Incident
- Discovered
- Oct 7, 2024
- Materiality determined
- —
- Notification sent
- Oct 18, 2024
- Affected individuals
- 5
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Maine Attorney GeneralNotified relevant regulators as necessary
Compliance
- Time to disclose
- 11 days(11 days from discovery to filing)
- Compliance flags
- Leak >180dME AG ≤30d · 11d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 7, 2024→ Filed with AG: Oct 18, 202411d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.