HackingCapture Stored DataData ExfiltratedEmployee Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTEMPLOYMENTMediumContained
Util-Assist Inc.
bd_0ab5111386e2836c · schema v1 · pii pii-v1
Full breach record for Util-Assist Inc. →Util-Assist Inc. experienced an external system breach on July 11, 2025 when an unauthorized actor accessed its IT systems and exfiltrated employee data. The affected Maine resident's information included name, Social Security number, bank account/direct deposit details, contact information, date of birth, and employment history. Materiality was determined on August 14, 2025. Notification was mailed August 27, 2025. Two years of Equifax credit monitoring were offered.
Maine clockDiscovered Jul 11, 2025 → Filed with AG Aug 29, 202549d ⏱ ME AG >30d7 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c192eff0-ce9e-441b-b6bd-10067c307b7f.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 29, 2025
- Raw hash
- d29cc7e0bc048bff303fef7623f6e1a68fc0eb0bf0fa2525dd5983a9c223dba7
Reporting entity
- Name
- Util-Assist Inc.norm: util assist
- Domain
- util-assist.com
Victim entity
- Name
- Util-Assist Inc.norm: util assist
- Domain
- util-assist.com
Incident
- Discovered
- Jul 11, 2025
- Materiality determined
- Aug 14, 2025
- Notification sent
- Aug 27, 2025
- Affected individuals
- 1
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTEMPLOYMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
Compliance
- Time to disclose
- 7 weeks(49 days from discovery to filing)
- Compliance flags
- ME AG >30d · 49d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 11, 2025→ Filed with AG: Aug 29, 202549d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.