HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSPCIMediumContained
Polished.com
bd_243ab28b57b1b35e · schema v1 · pii pii-v1
Full breach record for Polished.com →Polished.com, an e-commerce company, experienced an external system breach affecting 9,290 individuals. The incident occurred between March 16, 2023, and April 23, 2023, and was discovered on March 17, 2023. The compromised information includes names combined with financial account or credit/debit card numbers and their associated security codes or PINs. Affected residents were notified on May 22, 2023.
Maine clockDiscovered Mar 17, 2023 → Filed with AG May 22, 202366d ⏱ ME AG >30d9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_254a757d8efec848Montana State AGfiled 2023-05-22Verified
- bd_b871552b83ee6c52California State AGfiled 2023-05-22Verified
- bd_98c4b857a36d4e67SEC 8-Kfiled 2023-05-26(4d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f666d7df-77af-4b94-8bd7-831a0cbe437c.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 22, 2023
- Raw hash
- 5db5b9815ba28b0cc165816f53b7bb5e9b108f063a2c325e981cff8b6dc5934a
Reporting entity
- Name
- Polished.comnorm: polishedcom
- Domain
- polished.com
Victim entity
- Name
- Polished.comnorm: polishedcom
- Domain
- polished.com
Incident
- Discovered
- Mar 17, 2023
- Materiality determined
- —
- Notification sent
- May 22, 2023
- Affected individuals
- 9,290
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSPCI
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 9 weeks(66 days from discovery to filing)
- Compliance flags
- ME AG >30d · 66dME resident >60d · 66d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 17, 2023→ Filed with AG: May 22, 202366d 30 days (soft) ME AG >30d Maine Discovered: Mar 17, 2023→ Notified: May 22, 202366d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.