HackingTransportation & LogisticsTransportationCapture Stored DataData ExfiltratedCustomer Data InvolvedPCIPIILowContained
Christopherson Business Travel
bd_0286e41ba2f3b654 · schema v1 · pii pii-v1
Full breach record for Christopherson Business Travel →On February 21, 2025, Christopherson Business Travel (CBT), a corporate airfare booking company, detected unauthorized access to its network. An unauthorized actor copied a limited amount of payment card information (name, card number, expiration date) from CBT's network. No CVV codes, zip codes, or addresses were compromised. 42 individuals were affected in total, including 1 Maine resident. Discovery occurred on June 23, 2025. Equifax credit monitoring was offered for 12 months.
Maine clockDiscovered Jun 23, 2025 → Filed with AG Jul 15, 202522d ✓ ME AG ≤30d22 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/3eb1ec7c-9c37-46b8-a711-85e084977eee.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 15, 2025
- Raw hash
- 3022061186924926b49e1732d3d15b92f8f90dc5c67beb6ff3d5c002d51eb651
Reporting entity
- Name
- Christopherson Business Travelnorm: christopherson business travel
- Industry
- Other Commercial
Victim entity
- Name
- Christopherson Business Travelnorm: christopherson business travel
- Industry
- Other Commercial
- Industry
- Transportation & Logisticsllm
Incident
- Discovered
- Jun 23, 2025
- Materiality determined
- —
- Notification sent
- Jul 18, 2025
- Affected individuals
- 1
- Data types
- PCIPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 22 days(22 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 22d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 23, 2025→ Filed with AG: Jul 15, 202522d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.