MalwareRetailRansomwareData EncryptedCustomer Data InvolvedRansom DemandedIdentity (basic)Government IDMediumResolved

Rem Optical Company, Inc.

bd_1dbfa5eb4e343d5f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 17, 2020

Filed

Dec 16, 2020

To disclose

26 weeks

Affected · nationwide

3041 in this filing

Linked

4 filings

Confidence

65%

Full breach record for Rem Optical Company, Inc. →

Rem Optical Company, Inc., doing business as De Rigo Rem, experienced a ransomware incident on June 17, 2020. The breach was discovered the same day and impacted 304 individuals. The compromised data included names and Social Security numbers. In response, the company provided affected individuals with 24 months of complimentary credit monitoring and identity theft protection services through Experian.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jun 17, 2020 → Filed with AG Dec 16, 2020182d ✗ ME AG >90d26 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 26 weeks / 182 days

Jun 17, 2020

Begins

Jun 17, 2020

Discovered

Dec 16, 2020

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_cd16e1cdd9beea372020-12-15 · +1dVerified
New Hampshire State AGbd_c1dcb161b2d1c1872020-12-21 · +5dVerified
Massachusetts State AGbd_ff33ae231aacc2582020-12-23 · +7dVerified

Name: Rem Optical Company, Inc.
norm: rem optical

Name: Rem Optical Company, Inc.
norm: rem optical
Also named: Rem Optical Company, Inc.dba oflegal entity
De Rigo Remdba oftrade name

Discovered: Jun 17, 2020
Breach occurred: Jun 17, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 15, 2020
Affected individuals: 304state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: External

During the incident: Sent written notification to affected consumers
Offered identity theft protection services
Changes made: Offered 24 months of credit monitoring and identity theft protection services from Experian IdentityWorks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 weeks(182 days from discovery to filing)
Compliance flags: ME AG >90d · 182dME resident >180d · 181d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jun 17, 2020
→ Filed with AG: Dec 16, 2020
182d 90 days ME AG >90d
Maine
Discovered: Jun 17, 2020
→ Notified: Dec 15, 2020
181d 180 days ME resident >180d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jun 17, 2020 → Filed with AG: Dec 16, 2020	182d	90 days	ME AG >90d
Maine	Discovered: Jun 17, 2020 → Notified: Dec 15, 2020	181d	180 days	ME resident >180d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGDec 15 · first

Maine State AG+1d · this page

New Hampshire State AG+6d

Massachusetts State AG+8d

Pattern: first filing Dec 15 (IN), last Dec 23 (MA) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/33b0a715-f533-42c4-893d-6d45b80f3762.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 16, 2020
Raw hash: 8de49cb6ab88495db5c24a18b37f92b9e6284c74ffed0396dfb813ff9b1b0cd8

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityRem Optical Company, Inc.

Victim entityRem Optical Company, Inc.

Incidentdiscovered Jun 17, 2020

Stated responseSent written notification to affected consumers

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov