HackingRetail & ConsumerRetailMedium
Beach Properties
bd_047d84a63ff83478 · schema v1 · pii pii-v1
Full breach record for Beach Properties →Beach Properties d/b/a Basin Harbor Resort (Vergennes, VT) reported to the Maine Attorney General that an external system breach (hacking) occurred and was discovered on October 20, 2025, affecting 3,150 individuals total, including 21 Maine residents. Written consumer notifications were sent on April 20, 2026, and 12 months of TransUnion credit and identity monitoring with fraud assistance were offered. The filing did not specify the categories of personal information acquired.
Maine clockDiscovered Oct 20, 2025 → Filed with AG Apr 21, 2026183d ✗ ME AG >90d26 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_0d756c965855eb42New Hampshire State AGfiled 2026-04-21Verified
- bd_83680b8d3cfa5fa2Vermont State AGfiled 2026-04-22(1d gap)Verified
- bd_11044d5332cedf1dIndiana State AGfiled 2026-04-20(1d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d3a6a1b1-aa0a-4b73-b733-1d35ce0fc888.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 21, 2026
- Raw hash
- d1ef5ef9403f59540c183d0ecb7f810074b9fa344eeecfec298c14bc2d37ce6c
Reporting entity
- Name
- Kennedys CMK LLP (Counsel for Beach Propertiesnorm: kennedys cmk llp counsel for beach properties
Victim entity
- Name
- Beach Propertiesnorm: beach properties
- Industry
- Hospitality / Lodging
- Industry
- Retail & Consumerllm
Incident
- Discovered
- Oct 20, 2025
- Materiality determined
- —
- Notification sent
- Apr 20, 2026
- Affected individuals
- 3,150
- Data types
- —
- Attack vector
- Unauthorized Access
- Threat actor
- External
- Regulator citations
- Notified Maine Office of the Attorney General
Compliance
- Time to disclose
- 26 weeks(183 days from discovery to filing)
- Compliance flags
- ME AG >90d · 183dME resident >180d · 182d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 20, 2025→ Filed with AG: Apr 21, 2026183d 90 days ME AG >90d Maine Discovered: Oct 20, 2025→ Notified: Apr 20, 2026182d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.