HackingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIFINANCIALCREDENTIALSLowContained
KMS Solutions
bd_0806197029deddd4 · schema v1 · pii pii-v1
Full breach record for KMS Solutions →KMS Solutions, LLC experienced an external system breach (hacking) between November 27 and December 7, 2025. Suspicious system activity was identified and third-party specialists were engaged. The investigation was completed on or around December 31, 2025. Affected data may include first and last name, financial account information, and Social Security numbers. 19 Maine residents were affected. Experian IdentityWorks credit monitoring was offered for 12 months.
Maine clockDiscovered Dec 31, 2025 → Filed with AG Jan 16, 202616d ✓ ME AG ≤30d16 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_06cc23bbf060db3aVermont State AGfiled 2026-01-16Verified
- bd_c0198151dabe277bNew Hampshire State AGfiled 2026-01-26(10d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/60d71470-885a-4bb6-9f83-812e9a8f5d98.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 16, 2026
- Raw hash
- a65b0779506ab42aec375c73cde018f91df049ae28c70de0da6e3cc0e40d5b39
Reporting entity
- Name
- KMS Solutionsnorm: kms solutions
- Domain
- kms-solutions.net
- Industry
- Other Commercial
Victim entity
- Name
- KMS Solutionsnorm: kms solutions
- Domain
- kms-solutions.net
- Industry
- Other Commercial
Incident
- Discovered
- Dec 31, 2025
- Materiality determined
- —
- Notification sent
- Jan 16, 2026
- Affected individuals
- 19
- Data types
- PIIFINANCIALCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 16 days(16 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 16d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 31, 2025→ Filed with AG: Jan 16, 202616d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.