HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Concord Hospitality Enterprises Company, LLC
bd_0a1e8bc44c6816f6 · schema v1 · pii pii-v1
Full breach record for Concord Hospitality Enterprises Company, LLC →Concord Hospitality Enterprises Company, LLC reported an external system breach (hacking) occurring between August 15 and August 24, 2021, discovered on January 13, 2022. The incident affected 10,186 individuals, including 7 Maine residents. Acquired information included names and Social Security Numbers. The company provided written notification and offered single-bureau credit monitoring and identity theft protection.
Maine clockDiscovered Jan 13, 2022 → Filed with AG Feb 3, 202221d ✓ ME AG ≤30d21 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_d7c035b9335f66eeMontana State AGfiled 2022-02-02(1d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0a876095-020f-4613-b9dc-eac49fb49418.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 3, 2022
- Raw hash
- 27b3ea1eee2be93c1bf396f7b522bcccd0d4d42291e67adfb73a3203abfd41bb
Reporting entity
- Name
- Concord Hospitality Enterprises Company, LLCnorm: concord hospitality
Victim entity
- Name
- Concord Hospitality Enterprises Company, LLCnorm: concord hospitality
Incident
- Discovered
- Jan 13, 2022
- Materiality determined
- —
- Notification sent
- Feb 2, 2022
- Affected individuals
- 10,186
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 21 days(21 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 21d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 13, 2022→ Filed with AG: Feb 3, 202221d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.