HackingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Carus Corporation
bd_15b5bbb0ae58e7f3 · schema v1 · pii pii-v1
Full breach record for Carus Corporation →Carus, LLC (Peru, IL) experienced a network disruption on or around August 7, 2025. A third-party forensic investigation determined on September 8, 2025 that an unauthorized party may have accessed limited personal information including names and Social Security numbers. 1 Maine resident was affected out of 867 total. Notification letters were sent September 22, 2025. IDX identity protection and credit monitoring services (12 months) were offered to affected individuals.
Maine clockDiscovered Sep 8, 2025 → Filed with AG Sep 22, 202514d ✓ ME AG ≤30d14 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_57eee673b9c7238bIndiana State AGfiled 2025-09-22Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/96d474a7-37b9-4398-80b3-65abeef7016f.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 22, 2025
- Raw hash
- 9616ea6441f54edfc619b4897f8e69ff8e58e72a949fa6b4514aaec201bd1abb
Reporting entity
- Name
- Carus Corporationnorm: carus
- Industry
- Other Commercial
Victim entity
- Name
- Carus Corporationnorm: carus
- Industry
- Other Commercial
Incident
- Discovered
- Sep 8, 2025
- Materiality determined
- —
- Notification sent
- Sep 22, 2025
- Affected individuals
- 1
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 14 days(14 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 14d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 8, 2025→ Filed with AG: Sep 22, 202514d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.