HackingOtherPIIMedium
JC Resorts LLC
bd_253b3923102e86fb · schema v1 · pii pii-v1
Full breach record for JC Resorts LLC →JC Resorts LLC reported to the Maine Attorney General that an external system breach (hacking) occurred on 01/19/2026 and was discovered on 03/03/2026, affecting 5,942 individuals total (1 Maine resident). Written notifications were sent on 04/28/2026 and affected individuals were offered 24 months of Experian credit monitoring and identity restoration services. The Maine AG submission did not enumerate the specific data elements compromised.
Maine clockDiscovered Mar 3, 2026 → Filed with AG Apr 28, 202656d ⏱ ME AG >30d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by qilin about this victim predates this filing by 99 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_120ae0978d45e0deLeak Siteqilinfiled 2026-02-14(73d gap)Verified
- bd_edd06f07c59276f9Leak Siteqilinfiled 2026-01-19(99d gap)Verified
Regulatory filings (1) · sorted by filing gap
- bd_f42c4e2774364fa1California State AGfiled 2026-04-28Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d72862fb-5b7c-4e43-9d8d-37bdffcba7cb.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 28, 2026
- Raw hash
- f0c334d1561aa1e83f3cee7db5674e1729b817e9b921026bbc750b46754c28f5
Reporting entity
- Name
- JC Resorts LLCnorm: jc resorts
- Domain
- jcresorts.com
Victim entity
- Name
- JC Resorts LLCnorm: jc resorts
- Domain
- jcresorts.com
- Industry
- Hospitality / Resorts
- Industry
- Otherllm
Incident
- Discovered
- Mar 3, 2026
- Materiality determined
- —
- Notification sent
- Apr 28, 2026
- Affected individuals
- 5,942
- Data types
- PII
- Attack vector
- Unauthorized Access
- Threat actor
- External
- Regulator citations
- Maine Attorney General notification
Compliance
- Time to disclose
- 8 weeks(56 days from discovery to filing)
- Compliance flags
- ME AG >30d · 56dLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 3, 2026→ Filed with AG: Apr 28, 202656d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.