HackingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumResolved
UNIVERSAL PURE HOLDINGS, LLC
bd_1ba3b287920e9a93 · schema v1 · pii pii-v1
Full breach record for UNIVERSAL PURE HOLDINGS, LLC →Universal Pure, LLC identified suspicious activity on August 20, 2024 within certain computer systems. Investigation determined unauthorized access and file exfiltration occurred between July 10, 2024 and August 20, 2024. Information potentially involved includes names and Social Security numbers. Review completed August 7, 2025; 1 Maine resident notified April 21, 2026. Credit monitoring offered via Cyberscout/TransUnion for 12 months.
Maine clockDiscovered Aug 7, 2025 → Filed with AG Apr 21, 2026257d ✗ ME AG >90d37 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
A leak claim by play about this victim predates this filing by 610 days.View originating leak claim
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a15ad03a-1638-4a3e-bbf4-f094f3fbb211.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 21, 2026
- Raw hash
- a25e66e3dfa5285bfa69bd3d8d3cb2063790b16466e375a28de7818d3cfc7209
Reporting entity
- Name
- UNIVERSAL PURE HOLDINGS, LLCnorm: universal pure
- Domain
- universalpure.com
- Industry
- Other Commercial
Victim entity
- Name
- UNIVERSAL PURE HOLDINGS, LLCnorm: universal pure
- Domain
- universalpure.com
- Industry
- Other Commercial
Incident
- Discovered
- Aug 7, 2025
- Materiality determined
- —
- Notification sent
- Apr 21, 2026
- Affected individuals
- 1
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified federal law enforcementProvided written notice to relevant state regulatorsNotified three major credit reporting agencies (Equifax, Experian, TransUnion)
Compliance
- Time to disclose
- 37 weeks(257 days from discovery to filing)
- Compliance flags
- ME AG >90d · 257dME resident >180d · 257dLeak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 7, 2025→ Filed with AG: Apr 21, 2026257d 90 days ME AG >90d Maine Discovered: Aug 7, 2025→ Notified: Apr 21, 2026257d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.