HackingCustomer Data InvolvedLow
Harbor
bd_2553d8403fd8364b · schema v1 · pii pii-v1
Full breach record for Harbor →Harbor experienced an external system breach (hacking) that was discovered on August 1, 2025. The breach occurred on July 25, 2025, and affected 5 Maine residents. Affected individuals were offered 12 months of credit monitoring and identity theft protection services.
Maine clockDiscovered Aug 1, 2025 → Filed with AG Oct 24, 202584d ⏱ ME AG >30d12 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_2f540137b6d03267New Hampshire State AGfiled 2025-10-24Verified
- bd_9a4998fa85b306a6Vermont State AGfiled 2025-10-24Verified
- bd_d4a34d6895ce7979Montana State AGfiled 2025-10-24Verified
- bd_7bfe7b23f5f210c7HHS OCRfiled 2025-09-30(24d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/44f9f1db-7a31-452c-8a6e-5651aa35d979.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 24, 2025
- Raw hash
- adfa8699b549cfb875ff069f519965c9f17cdba36adec9bcb204621b38fd0f2a
Reporting entity
- Name
- Harbornorm: harbor
- Domain
- goharbor.io
Victim entity
- Name
- Harbornorm: harbor
- Domain
- goharbor.io
Incident
- Discovered
- Aug 1, 2025
- Materiality determined
- —
- Notification sent
- Oct 24, 2025
- Affected individuals
- 5
- Data types
- —
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 12 weeks(84 days from discovery to filing)
- Compliance flags
- ME AG >30d · 84dME resident >60d · 84d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 1, 2025→ Filed with AG: Oct 24, 202584d 30 days (soft) ME AG >30d Maine Discovered: Aug 1, 2025→ Notified: Oct 24, 202584d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.