HackingCustomer Data InvolvedPIILowContained
IMA
bd_16e5e71a5f499131 · schema v1 · pii pii-v1
Full breach record for IMA →Maine Attorney General notice regarding an external system breach (hacking) affecting IMA Diligence Services, LLC. The breach occurred on 12/08/2025 and was discovered on 05/04/2026. Notification was sent on 05/29/2026. The filing does not specify the number of affected individuals or specific data types acquired, but identity theft protection services (12 months credit monitoring via Transunion) were offered.
Maine clockDiscovered May 4, 2026 → Filed with AG May 29, 202625d ✓ ME AG ≤30d25 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 10 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (9) · sorted by filing gap
- bd_251ec6b205f440aeOregon State AGfiled 2026-05-29Verified by operator
- bd_3bd537247ac6bc06New Hampshire State AGfiled 2026-05-29Verified
- bd_4c7e828b89582965Vermont State AGfiled 2026-05-29Verified
- bd_5cecf8343e66696fIndiana State AGfiled 2026-05-29Verified
Show 5 more filings ↓Show fewer ↑up to 28d gap
- bd_878291acd9c7efadDelaware State AGfiled 2026-05-29Verified
- bd_c997f1d0e86131f5California State AGfiled 2026-05-29Verified
- bd_ccd420ce52718acdWashington State AGfiled 2026-05-29Verified by operator
- bd_8f50a59fb1559a98South Carolina State AGfiled 2026-06-01(3d gap)Verified
- bd_ec7a7a80f0d522baMassachusetts State AGfiled 2026-05-01(28d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/387650f3-632c-4e37-bb6b-2f2a559b2bcf.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 29, 2026
- Raw hash
- 6a4c6d8aec38c81d0a5285fb314a3eb5a71a8ab8f997fdfd22e7d1e892b54429
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- IMAnorm: ima
- Domain
- imanet.org
Incident
- Discovered
- May 4, 2026
- Materiality determined
- —
- Notification sent
- May 29, 2026
- Affected individuals
- Not disclosed
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 25 days(25 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 25d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 4, 2026→ Filed with AG: May 29, 202625d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.