HackingStolen CredentialsCapture App DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIILowContained
Donaghy Sales LLC
bd_15de0eb586161dbd · schema v1 · pii pii-v1
Full breach record for Donaghy Sales LLC →On July 22–23, 2025, an unknown external actor gained unauthorized access to a single corporate email account at Donaghy Sales LLC (Fresno, CA). The actor potentially acquired files containing personal information. The incident was discovered on December 4, 2025, and affected individuals were notified on December 12, 2025. 1 Maine resident was among 1,947 total individuals affected. IDX identity protection services were offered for 12 months.
Maine clockDiscovered Dec 4, 2025 → Filed with AG Dec 12, 20258d ✓ ME AG ≤30d8 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_4697894da915f92dCalifornia State AGfiled 2025-12-12Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/bd3f17b4-f9a9-44f3-bacc-514ea07f2a1b.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 12, 2025
- Raw hash
- 5d0f8e640e7b0c993bfe4465fcbf980d263ce82a2f3812fb492a20edbc856359
Reporting entity
- Name
- Donaghy Sales LLCnorm: donaghy sales
- Industry
- Other Commercial
Victim entity
- Name
- Donaghy Sales LLCnorm: donaghy sales
- Industry
- Other Commercial
Incident
- Discovered
- Dec 4, 2025
- Materiality determined
- —
- Notification sent
- Dec 12, 2025
- Affected individuals
- 1
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
Compliance
- Time to disclose
- 8 days(8 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 8d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 4, 2025→ Filed with AG: Dec 12, 20258d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.