HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighActive
Brock Group
bd_1b3e80e20e6c9dfd · schema v1 · pii pii-v1
Full breach record for Brock Group →The Brock Group, Inc. experienced an external system breach (hacking) between May 7, 2021, and May 11, 2021. The incident was discovered on July 13, 2021. The breach compromised names and Social Security Numbers of 2,305 individuals, including 7 Maine residents. The company provided written notification on August 10, 2021, and offered identity theft protection services, including credit and dark web monitoring, a $1M reimbursement insurance policy, and ID recovery services. Investigation was ongoing at the time of filing.
Maine clockDiscovered Jul 13, 2021 → Filed with AG Aug 10, 202128d ✓ ME AG ≤30d28 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_f7776335d63a076bMontana State AGfiled 2021-08-10Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/af70fcd2-71a7-4d24-ae4d-a013a226d1dd.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 10, 2021
- Raw hash
- 39d0d6b4af7de507f6d2589fda56e8b240d77ff35086b0cca9c0c4a8f2ac0c98
Reporting entity
- Name
- Lewis Brisbois Bisgaard & Smith, PLLCnorm: lewis brisbois bisgaard smith
Victim entity
- Name
- Brock Groupnorm: brock group
- Domain
- brockgroup.com
Incident
- Discovered
- Jul 13, 2021
- Materiality determined
- —
- Notification sent
- Aug 10, 2021
- Affected individuals
- 2,305
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 28d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 13, 2021→ Filed with AG: Aug 10, 202128d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.