HackingCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumResolved
Systems Application & Technologies, Inc.
bd_15a87e483ce638db · schema v1 · pii pii-v1
Full breach record for Systems Application & Technologies, Inc. →Systems Application & Technologies, Inc. (SA-TECH) experienced an external system breach in which unauthorized actors accessed and/or exfiltrated files from its network between March 20–26, 2024. The breach was discovered March 26, 2024. Compromised data included names, Social Security numbers, and driver's license/state ID numbers. Two Maine residents were notified on October 23, 2024. SA-TECH offered 12 months of credit monitoring via TransUnion/Cyberscout and notified federal law enforcement.
Maine clockDiscovered Mar 26, 2024 → Filed with AG Oct 23, 2024211d ✗ ME AG >90d30 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_035d95d8420b5ebaCalifornia State AGfiled 2024-10-23Verified
- bd_ef5a927cdce21c5fIndiana State AGfiled 2024-10-23Verified
- bd_f72e6ee7b3c944a0Montana State AGfiled 2024-10-23Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/210a1fac-2881-48c3-81ff-faf934d16264.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 23, 2024
- Raw hash
- 8b465dddb16201b2986620e69ec927ea9ac4f54a98099a1f9e30544136f3d992
Reporting entity
- Name
- Systems Application & Technologies, Inc.norm: systems application
- Domain
- sa-techinc.com
- Industry
- Other Commercial
Victim entity
- Name
- Systems Application & Technologies, Inc.norm: systems application
- Domain
- sa-techinc.com
- Industry
- Other Commercial
Incident
- Discovered
- Mar 26, 2024
- Materiality determined
- —
- Notification sent
- Oct 23, 2024
- Affected individuals
- 2
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified Maine Attorney GeneralNotified federal law enforcementNotified applicable state regulators as necessary
Compliance
- Time to disclose
- 30 weeks(211 days from discovery to filing)
- Compliance flags
- ME AG >90d · 211dME resident >180d · 211d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 26, 2024→ Filed with AG: Oct 23, 2024211d 90 days ME AG >90d Maine Discovered: Mar 26, 2024→ Notified: Oct 23, 2024211d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.