HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTMediumResolved
BLUE SPHERE CORPORATION
bd_03fda876284f781b · schema v1 · pii pii-v1
Full breach record for BLUE SPHERE CORPORATION →Blue Sphere, a Florida-based commercial entity, reported an external system breach (hacking) occurring on April 24, 2020, discovered on June 5, 2020. The incident compromised the personal information of 2,689 individuals, including 7 Maine residents. Acquired data included names combined with financial account or credit/debit card numbers (with security codes/PINs). Written notification was sent on October 29, 2020. No identity theft protection services were offered.
Maine clockDiscovered Jun 5, 2020 → Filed with AG Nov 5, 2020153d ✗ ME AG >90d22 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_cbf038c8ad3d9fd0Montana State AGfiled 2020-10-29(7d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/08f75ba3-3a5e-4033-85be-916bf271dfdd.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 5, 2020
- Raw hash
- ef8fb0c0595ebcec9ed6fbb83b570f2a29d4cbf8f2c2ec8cf3b23336be4e0c8a
Reporting entity
- Name
- BLUE SPHERE CORPORATIONnorm: blue sphere
Victim entity
- Name
- BLUE SPHERE CORPORATIONnorm: blue sphere
Incident
- Discovered
- Jun 5, 2020
- Materiality determined
- —
- Notification sent
- Oct 29, 2020
- Affected individuals
- 2,689
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 22 weeks(153 days from discovery to filing)
- Compliance flags
- ME AG >90d · 153dME resident >60d · 146d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 5, 2020→ Filed with AG: Nov 5, 2020153d 90 days ME AG >90d Maine Discovered: Jun 5, 2020→ Notified: Oct 29, 2020146d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.