HackingHacking OtherCustomer Data InvolvedLow
Graebel Companies, Inc.
bd_22d338674a0c0fa3 · schema v1 · pii pii-v1
Full breach record for Graebel Companies, Inc. →Graebel Companies, Inc. reported a data breach affecting 15 Maine residents. The incident was categorized as an external system breach (hacking) that occurred on December 19, 2024, and was discovered on October 24, 2025. Affected consumers were notified on November 10, 2025, and offered 24 months of credit monitoring and identity theft protection services through TransUnion.
Maine clockDiscovered Oct 24, 2025 → Filed with AG Nov 10, 202517d ✓ ME AG ≤30d17 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_2c087f5658292a9bNew Hampshire State AGfiled 2025-11-10Verified
- bd_3338885415a19f86Indiana State AGfiled 2025-11-10Verified
- bd_362736f9c58a9c4aVermont State AGfiled 2025-11-10Verified
- bd_8a7899be71a5b644Montana State AGfiled 2025-11-10Candidate
Show 1 more filing ↓Show fewer ↑up to 2d gap
- bd_8f785a8bea830a5eTexas State AGfiled 2025-11-12(2d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/68640747-c6ce-4cda-88a6-c09693a359df.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 10, 2025
- Raw hash
- 57f8a9d90f5b7f4d1657f433b7e7dd5451129ac6bf367fb16e789fae62b752d8
Reporting entity
- Name
- Graebel Companies, Inc.norm: graebel companies
Victim entity
- Name
- Graebel Companies, Inc.norm: graebel companies
Incident
- Discovered
- Oct 24, 2025
- Materiality determined
- —
- Notification sent
- Nov 10, 2025
- Affected individuals
- 15
- Data types
- —
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 17 days(17 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 17d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 24, 2025→ Filed with AG: Nov 10, 202517d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.