HackingProfessional ServicesProfessional ServicesData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumContained
CES Group Engineers, LLP
bd_13aa5da49372af8e · schema v1 · pii pii-v1
Full breach record for CES Group Engineers, LLP →CES Group Engineers, LLP, a Charlotte, NC engineering firm, experienced an external system breach in which an unauthorized actor potentially accessed files within its network from August 20–21, 2025. The breach was discovered on November 10, 2025 after a detailed file review. Information potentially exposed includes names and driver's license numbers. One Maine resident was affected out of 130 total. Affected individuals were offered 12 months of credit monitoring through CyEx.
Maine clockDiscovered Nov 10, 2025 → Filed with AG Dec 16, 202536d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/16fa9da9-a0ed-4b2e-b4d9-f2cfd2a83c37.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 16, 2025
- Raw hash
- d04732df488568d15ffa547e548bdd94ce642a0693117800a85e69d6a15770cb
Reporting entity
- Name
- CES Group Engineers, LLPnorm: ces group engineers
- Domain
- ces-group.net
- Industry
- Engineering
Victim entity
- Name
- CES Group Engineers, LLPnorm: ces group engineers
- Domain
- ces-group.net
- Industry
- Engineering
- Industry
- Professional Servicesllm
Incident
- Discovered
- Nov 10, 2025
- Materiality determined
- —
- Notification sent
- Dec 16, 2025
- Affected individuals
- 1
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Maine AGNotified law enforcementNotified applicable state regulators
Compliance
- Time to disclose
- 5 weeks(36 days from discovery to filing)
- Compliance flags
- ME AG >30d · 36d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 10, 2025→ Filed with AG: Dec 16, 202536d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.