Social EngineeringBECPhishingCustomer Data InvolvedData ExfiltratedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowResolved
Komatsu America Corp.
bd_076fbb8f08f92a74 · schema v1 · pii pii-v1
Full breach record for Komatsu America Corp. →Komatsu America Corp. experienced a business email compromise incident on September 20, 2021, which was discovered two days later. The breach affected 407 individuals, exposing names and financial account or credit/debit card numbers along with their access codes. Komatsu began notifying affected individuals on December 6, 2021, and offered 12 months of identity protection services through IDX.
Maine clockDiscovered Sep 22, 2021 → Filed with AG Dec 6, 202175d ⏱ ME AG >30d11 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed407 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/fb31a0e5-f8ae-4f56-8512-3bc1ee724cfa.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 6, 2021
- Raw hash
- 3fa246a882df52fa80eea521665cbf297e97072ee87a3b07d275277c93a84c3f
Reporting entity
- Name
- Komatsu America Corp.norm: komatsu america
Victim entity
- Name
- Komatsu America Corp.norm: komatsu america
Incident
- Discovered
- Sep 22, 2021
- Materiality determined
- —
- Notification sent
- Dec 6, 2021
- Affected individuals
- 407
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566 Phishing
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 11 weeks(75 days from discovery to filing)
- Compliance flags
- ME AG >30d · 75dME resident >60d · 75d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 22, 2021→ Filed with AG: Dec 6, 202175d 30 days (soft) ME AG >30d Maine Discovered: Sep 22, 2021→ Notified: Dec 6, 202175d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.