HackingRetail & ConsumerRetailCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

The Tailored Closet of Southern Maine

bd_221d9e1e5f4ea9e2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 28, 2025

Filed

May 5, 2025

To disclose

7 days

Affected

9state residents only

Linked

2 filings

Confidence

66%

Full breach record for The Tailored Closet of Southern Maine →

The Tailored Closet of Southern Maine experienced an external system breach (hacking) on April 23, 2025, affecting its payroll system. The incident exposed the names, Social Security numbers, and bank account numbers of 9 Maine residents. The breach was discovered on April 28, 2025, and notifications were sent on May 5, 2025. Experian provided 12 months of credit monitoring and identity theft protection services.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Apr 28, 2025 → Filed with AG May 5, 20257d ✓ ME AG ≤30d7 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 5 days

discovery → filing · 7 days

Apr 23, 2025

Begins

Apr 28, 2025

Discovered

May 5, 2025

Filed

vs. sector median

7 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

New Hampshire State AGbd_ddb1a5ca266e1fb22025-05-05Verified

Name: The Tailored Closet of Southern Maine
norm: the tailored closet of southern maine

Name: The Tailored Closet of Southern Maine
norm: the tailored closet of southern maine
Industry: Retail & Consumerllm

Discovered: Apr 28, 2025
Breach occurred: Apr 23, 2025
Undetected for: 5 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 5, 2025
Affected individuals: 9state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Filed notification with the Maine Attorney General
Initial access: exploit_public_facing

During the incident: Took measures to secure the payroll system
Launched an investigation
Reviewed the information that the unauthorized actor potentially viewed
Mailed a notification letter via U.S. First-Class mail to the Maine residents
Offering the notified residents one year of complimentary credit monitoring, fraud consultation, and identity theft restoration services through Experian
Changes made: Continuing to train its employees concerning data security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 days(7 days from discovery to filing)
Compliance flags: ME AG ≤30d · 7d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Apr 28, 2025
→ Filed with AG: May 5, 2025
7d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Apr 28, 2025 → Filed with AG: May 5, 2025	7d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGMay 5 · first

Maine State AGMay 5 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/cfb3b46c-c34f-4b22-b1be-81b74e23acab.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 5, 2025
Raw hash: 9ca4cc5f7562e221bb6645311764b93b5c75ab0465bcb6d5d3e895ee8ae8c386

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityThe Tailored Closet of Southern Maine

Victim entityThe Tailored Closet of Southern Maine

Incidentdiscovered Apr 28, 2025

Stated responseTook measures to secure the payroll system

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov