HackingCustomer Data InvolvedLow
MAG Aerospace
bd_0d1bbd836b928684 · schema v1 · pii pii-v1
Full breach record for MAG Aerospace →MAG DS Corp., doing business as MAG Aerospace, reported a data breach to the Maine Attorney General's office. The breach, described as an external system hack, occurred between August 30 and August 31, 2025, and was discovered on August 30, 2025. The incident affected 8 Maine residents out of a total of 4,280 individuals. Affected individuals were notified on December 5, 2025, and offered 24 months of Experian IdentityWorks credit monitoring and identity theft protection services.
Maine clockDiscovered Aug 30, 2025 → Filed with AG Dec 4, 202596d ✗ ME AG >90d14 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_279aa78d1a54080fNew Hampshire State AGfiled 2025-12-04Verified
- bd_de03af1ed99bd924Montana State AGfiled 2025-12-04Candidate
- bd_08dd1559ad977feaIndiana State AGfiled 2025-12-05(1d gap)Verified
- bd_49e0d66755af8501Texas State AGfiled 2025-12-05(1d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 1d gap
- bd_6988ddd233d64e12Vermont State AGfiled 2025-12-05(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/9869d7e0-04a5-40bd-9a8e-157bbbcd2731.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 4, 2025
- Raw hash
- 874889076f3695fe234b0cba528870a5ceacfad983fe78ce8dc58b4ab85418ae
Reporting entity
- Name
- MAG Aerospacenorm: mag aerospace
Victim entity
- Name
- MAG Aerospacenorm: mag aerospace
Incident
- Discovered
- Aug 30, 2025
- Materiality determined
- —
- Notification sent
- Dec 5, 2025
- Affected individuals
- 8
- Data types
- —
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 14 weeks(96 days from discovery to filing)
- Compliance flags
- ME AG >90d · 96dME resident >60d · 97d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 30, 2025→ Filed with AG: Dec 4, 202596d 90 days ME AG >90d Maine Discovered: Aug 30, 2025→ Notified: Dec 5, 202597d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.