MalwareRansomwareData EncryptedRansom DemandedCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsPCILowContained

A/Z Corporation

bd_1a80146f13909755 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 14, 2021

Filed

Sep 8, 2021

To disclose

8 weeks

Affected · nationwide

6491 in this filing

Confidence

65%

Full breach record for A/Z Corporation →

On July 14, 2021, A/Z Corporation discovered a ransomware attack that had occurred on the same day. The incident compromised the names and financial account or credit/debit card numbers (with access codes) of 649 individuals. A/Z Corporation began notifying affected consumers in writing on September 7, 2021, and offered one year of complimentary credit monitoring and identity theft protection services through Kroll.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jul 14, 2021 → Filed with AG Sep 8, 202156d ⏱ ME AG >30d8 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 8 weeks / 56 days

Jul 14, 2021

Begins

Jul 14, 2021

Discovered

Sep 8, 2021

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed649 affectedView incident

Name: A/Z Corporation
norm: a z

Name: A/Z Corporation
norm: a z

Discovered: Jul 14, 2021
Breach occurred: Jul 14, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 7, 2021
Affected individuals: 649state + nationwide
Data types: Identity (basic)Financial accountFinancial credentialsPCI
Data elements: Financial account number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial

During the incident: Sent written notification to affected consumers
Offered 1 year of credit monitoring and identity theft protection through Kroll
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(56 days from discovery to filing)
Compliance flags: ME AG >30d · 56d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jul 14, 2021
→ Filed with AG: Sep 8, 2021
56d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jul 14, 2021 → Filed with AG: Sep 8, 2021	56d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e6e1cfcc-f1a8-4fea-9497-3fa7ef74716e.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 8, 2021
Raw hash: e10ad9cdbd363f5de8c26a1b4c613484b3d7c655c7a5730b8c6fef7db71df866

Reporting entityA/Z Corporation

Victim entityA/Z Corporation

Incidentdiscovered Jul 14, 2021

Stated responseSent written notification to affected consumers

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov