HackingCustomer Data InvolvedIDENTITY_BASICMediumContained
Over the Top Marketing (OTTM)
bd_21bc746257c89ce0 · schema v1 · pii pii-v1
Full breach record for Over the Top Marketing (OTTM) →Over the Top Marketing (OTTM) experienced an external system breach (hacking) on November 29, 2022, affecting 24,764 individuals, including 5 Maine residents. The breach involved unauthorized access to systems containing personal identifiers. OTTM notified consumers in writing on May 26, 2023, and offered 12 months of credit monitoring, identity theft insurance, and recovery services through IDX.
Maine clockDiscovered Nov 29, 2022 → Filed with AG Jun 7, 2023190d ✗ ME AG >90d27 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_95018cbf7a014e21New Hampshire State AGfiled 2023-05-31(7d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0532f20a-9071-4de4-b7eb-02dbc6fcbf67.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 7, 2023
- Raw hash
- ad05c2b22f8e6729aaf2595f9665d3f5721ca287a317edea447d3e8661a07697
Reporting entity
- Name
- Marshall Denneheynorm: marshall dennehey
Victim entity
- Name
- Over the Top Marketing (OTTM)norm: over the top marketing ottm
Incident
- Discovered
- Nov 29, 2022
- Materiality determined
- —
- Notification sent
- May 26, 2023
- Affected individuals
- 24,764
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 27 weeks(190 days from discovery to filing)
- Compliance flags
- ME AG >90d · 190dME resident >60d · 178d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 29, 2022→ Filed with AG: Jun 7, 2023190d 90 days ME AG >90d Maine Discovered: Nov 29, 2022→ Notified: May 26, 2023178d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.