HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Matson Money
bd_25878eec46c86a8e · schema v1 · pii pii-v1
Full breach record for Matson Money →Matson Navigation Company reported an external system breach (hacking) on October 14, 2020, affecting approximately 25,000 individuals, including 221 Maine residents. The breach compromised names and Social Security Numbers. Matson sent written notifications and offered one year of identity theft protection services.
Maine clockDiscovered Oct 14, 2020 → Filed with AG Jan 4, 202182d ⏱ ME AG >30d12 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_6b8c99467add88b1California State AGfiled 2021-01-04Verified
- bd_55f92f0e8b0b2b7bOregon State AGfiled 2021-01-06(2d gap)Verified
- bd_d59e37baa4f5b92dWashington State AGfiled 2020-12-01(34d gap)Verified
- bd_958d4765c5a9c5a8Montana State AGfiled 2020-10-30(66d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b4f891f4-5b39-4f75-95d9-a18e2fd51de5.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 4, 2021
- Raw hash
- 468d682cbed68a6cb2e99d34104d797166d640aaad51f4618be393c911ebc4d4
Reporting entity
- Name
- Matson Moneynorm: matson money
- Domain
- matsonmoney.com
Victim entity
- Name
- Matson Moneynorm: matson money
- Domain
- matsonmoney.com
Incident
- Discovered
- Oct 14, 2020
- Materiality determined
- —
- Notification sent
- Nov 24, 2020
- Affected individuals
- 25,000
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 12 weeks(82 days from discovery to filing)
- Compliance flags
- ME AG >30d · 82d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 14, 2020→ Filed with AG: Jan 4, 202182d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.