HackingCustomer Data InvolvedDelayed DiscoveryFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSMediumContained
Hammond Lumber Company
bd_0eb9d39c5c342129 · schema v1 · pii pii-v1
Full breach record for Hammond Lumber Company →Hammond Lumber Company reported a data breach that occurred on March 22, 2023, and was discovered on April 23, 2023. The breach affected 2,092 individuals, including 1,980 Maine residents. The compromised information included names in combination with financial account or credit/debit card numbers and their associated security codes or PINs. Affected individuals were notified on May 15, 2023, and offered 12 months of identity theft and credit monitoring services through Experian.
Leak gap clock⏱ Leak >30d23 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by lockbit_3 about this victim predates this filing by 48 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_2d92c98054a9f464Leak Sitelockbit_3filed 2023-03-29(48d gap)Candidate
Regulatory filings (2) · sorted by filing gap
- bd_3d468a3b183e3a9fVermont State AGfiled 2023-05-16Verified
- bd_079111770019ae24Maine State AGfiled 2023-04-20(26d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/2fea7845-51c4-4ef0-8530-c97f3884b4a7.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 16, 2023
- Raw hash
- 5c930fba79b5fd73d2136ea2956906048a71c8b15ab9371ecc49eb7d212791a0
Reporting entity
- Name
- Hammond Lumber Companynorm: hammond lumber
- Domain
- hammondlumber.com
Victim entity
- Name
- Hammond Lumber Companynorm: hammond lumber
- Domain
- hammondlumber.com
Incident
- Discovered
- Apr 23, 2023
- Materiality determined
- —
- Notification sent
- May 15, 2023
- Affected individuals
- 2,092
- Data types
- FINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 23 days(23 days from discovery to filing)
- Compliance flags
- Leak >30dME AG ≤30d · 23d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 23, 2023→ Filed with AG: May 16, 202323d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.