HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Numrich Gun Parts Corporation
bd_259cc2e17fe85036 · schema v1 · pii pii-v1
Full breach record for Numrich Gun Parts Corporation →Numrich Gun Parts Corporation reported an external system breach (hacking) occurring between January 23, 2022, and April 5, 2022, discovered on May 12, 2022. The incident affected 45,169 individuals, including 317 Maine residents. Acquired data included names and financial account or credit/debit card numbers (with security codes/PINs). Written notification was sent on June 6, 2022. No identity theft protection services were offered.
Maine clockDiscovered May 12, 2022 → Filed with AG Jun 6, 202225d ✓ ME AG ≤30d25 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_35f783e31d78e59aCalifornia State AGfiled 2022-06-06Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c85b1a09-ea9b-4402-abb0-4d404f02d730.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 6, 2022
- Raw hash
- 389e2bb92b0d421df27cc505b32bbfa11a9b727ed55ca5c738b398662d7cf065
Reporting entity
- Name
- Numrich Gun Parts Corporationnorm: numrich gun parts
- Domain
- gunpartscorp.com
Victim entity
- Name
- Numrich Gun Parts Corporationnorm: numrich gun parts
- Domain
- gunpartscorp.com
Incident
- Discovered
- May 12, 2022
- Materiality determined
- —
- Notification sent
- Jun 6, 2022
- Affected individuals
- 45,169
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 25 days(25 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 25d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 12, 2022→ Filed with AG: Jun 6, 202225d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.