HackingCustomer Data InvolvedLow
Cardi's Department Store Inc.
bd_0e998d124b266f62 · schema v1 · pii pii-v1
Full breach record for Cardi's Department Store Inc. →Cardi’s Department Store Inc. reported an external system breach (hacking) that occurred on August 26, 2024, and was discovered on February 6, 2025. The breach affected 22 Maine residents out of a total of 7,498 individuals. The company notified affected consumers on March 10, 2025, and offered 12 months of credit monitoring and identity protection services through IDX.
Maine clockDiscovered Feb 6, 2025 → Filed with AG Mar 10, 202532d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_0795cc7ece386995New Hampshire State AGfiled 2025-03-10Verified
- bd_1b223bf6ed2343a9Maryland State AGfiled 2025-03-10Verified
- bd_fad6ad35d0799f0bMontana State AGfiled 2025-03-10Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ee73c57a-8b6c-4bdd-856e-76037672063c.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 10, 2025
- Raw hash
- 60a16738d5142c4b7ed0eb97773305ed37b201e3935c2b3facec2c8f17cde723
Reporting entity
- Name
- Cardi's Department Store Inc.norm: cardi s department store
Victim entity
- Name
- Cardi's Department Store Inc.norm: cardi s department store
Incident
- Discovered
- Feb 6, 2025
- Materiality determined
- —
- Notification sent
- Mar 10, 2025
- Affected individuals
- 22
- Data types
- —
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 5 weeks(32 days from discovery to filing)
- Compliance flags
- ME AG >30d · 32d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 6, 2025→ Filed with AG: Mar 10, 202532d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.