HackingTechnologyInformationData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)HighContained

THE TEAM COMPANIES, LLC

bd_115a48d3aeb79a6c · schema v1 · pii pii-v1

Severity

High

Discovered

Oct 22, 2025

Filed

Nov 21, 2025

To disclose

4 weeks

Affected · nationwide

21,93626 in this filing

Linked

11 filings

Confidence

66%

Full breach record for THE TEAM COMPANIES, LLC →

The TEAM Companies, LLC reported an external system breach (hacking) occurring between July 15 and July 26, 2025. The incident was discovered on October 22, 2025. Personal information including names, government IDs, financial account info, and health information was accessed. 21,936 individuals were affected, including 26 Maine residents. Notices were sent on November 21, 2025, offering 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Oct 22, 2025 → Filed with AG Nov 21, 202530d ✓ ME AG ≤30d4 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 99 days

discovery → filing · 4 weeks / 30 days

Jul 15, 2025

Begins

Oct 22, 2025

Discovered

Nov 21, 2025

Filed

vs. sector median

14 wks faster

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

California State AGbd_2b6ba65929ac4c502025-11-21Verified
Oregon State AGbd_306ee87ddbec56492025-11-21Verified
Nebraska State AGbd_369e278825831bc62025-11-21Verified
Montana State AGbd_565849065c695c8d2025-11-21Candidate

Show 6 more filings ↓up to 20d gap

Rhode Island State AGbd_7f39e460e8945f732025-11-21Verified
Indiana State AGbd_a432c1d2c251b7502025-11-21Verified
Massachusetts State AGbd_c84eb36de5cf1d5c2025-11-21Verified
New Hampshire State AGbd_e721aac55dfbf7032025-11-21Verified
Texas State AGbd_bb8a5b4e308bbc482025-11-25 · +4dVerified
Illinois State AGbd_8be9aa9f2f3a20212025-11-01 · +20dVerified

Name: THE TEAM COMPANIES, LLC
norm: the team companies

Name: THE TEAM COMPANIES, LLC
norm: the team companies
Industry: Technologyllm

Discovered: Oct 22, 2025
Breach occurred: Jul 15, 2025 – Jul 26, 2025
Undetected for: 99 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 21, 2025
Affected individuals: 21,936state + nationwide
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Data elements: Date of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Regulator citations: Notified Maine Attorney General
Initial access: exploit_public_facing

During the incident: Isolated affected systems
Notified federal law enforcement
Engaged third-party forensics experts
Eradicated the unauthorized access
Changes made: Engaged a third party to conduct dark web monitoring
Taken steps to further safeguard our systems and information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(30 days from discovery to filing)
Compliance flags: ME AG ≤30d · 30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Oct 22, 2025
→ Filed with AG: Nov 21, 2025
30d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Oct 22, 2025 → Filed with AG: Nov 21, 2025	30d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 11 states

View merged incident ↗

Illinois State AGNov 1 · first

California State AG+20d

Oregon State AG+20d

Nebraska State AG+20d

Montana State AG+20d

Rhode Island State AG+20d

Indiana State AG+20d

Massachusetts State AG+20d

New Hampshire State AG+20d

Maine State AG+20d · this page

Texas State AG+24d

Pattern: first filing Nov 1 (IL), last Nov 25 (TX) — a 24-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ea3472ed-75ed-4d44-bb76-c716f4c8f972.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 21, 2025
Raw hash: 7922e09b807fceb455e5ce564677a2e0b9132a28f18636dce27fe915a135abb6

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityTHE TEAM COMPANIES, LLC

Victim entityTHE TEAM COMPANIES, LLC

Incidentdiscovered Oct 22, 2025

Stated responseIsolated affected systems

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov