HackingSupply Chain (3P Vendor)Customer Data InvolvedFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowResolved
LEM Products Direct LLC
bd_1797a1b05563050c · schema v1 · pii pii-v1
Full breach record for LEM Products Direct LLC →LEM Products Direct LLC reported a data breach affecting 138 Maine residents, which occurred due to a cybersecurity incident at its third-party e-commerce vendor, CommerceV3. The breach, lasting from November 24, 2021, to December 14, 2022, was discovered on June 6, 2023. The compromised information includes names in combination with financial account or credit/debit card numbers and their security codes.
Maine clockDiscovered Jun 6, 2023 → Filed with AG Jul 13, 202337d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed138 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/642c26ab-7e97-40ce-b02a-481280f22d9c.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 13, 2023
- Raw hash
- 26156b97b260df170265e7aa718ddf319ccc0c849e5aa594aad071acf2f8fe0b
Reporting entity
- Name
- LEM Products Direct LLCnorm: lem products direct
Victim entity
- Name
- LEM Products Direct LLCnorm: lem products direct
Incident
- Discovered
- Jun 6, 2023
- Materiality determined
- —
- Notification sent
- Jul 13, 2023
- Affected individuals
- 138
- Data types
- FINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Third-Party / Supply Chain
- Threat actor
- External
Compliance
- Time to disclose
- 5 weeks(37 days from discovery to filing)
- Compliance flags
- ME AG >30d · 37d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 6, 2023→ Filed with AG: Jul 13, 202337d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.