HackingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLow
Resort Data Processing
bd_261cdc2d59a3bfac · schema v1 · pii pii-v1
Full breach record for Resort Data Processing →Resort Data Processing, Inc. experienced an external system breach where an unauthorized party accessed customer names and financial account information, including credit/debit card numbers and their associated security codes, access codes, passwords, or PINs. The breach occurred on August 1, 2022, was discovered on August 21, 2023, and affected 85 Maine residents. The company offered 12 months of credit monitoring and identity restoration services through Kroll Inc.
Maine clockDiscovered Aug 21, 2023 → Filed with AG Oct 27, 202367d ⏱ ME AG >30d10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_0610ee2684ca6f94Montana State AGfiled 2023-10-27Candidate
- bd_77ebc3a0c5dafb05New Hampshire State AGfiled 2023-10-27Verified
- bd_cdde0cb57f086db5Oregon State AGfiled 2023-10-27Verified
- bd_f4095132606e7467Washington State AGfiled 2023-10-27Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/fb8c8264-7a39-4c91-81fb-40b6f85bec9e.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 27, 2023
- Raw hash
- 1a8d8f5b4928d850bc647bcbc43380f663f05707333b626d3a4f90566da01a66
Reporting entity
- Name
- Resort Data Processingnorm: resort data processing
- Domain
- resortdata.com
Victim entity
- Name
- Resort Data Processingnorm: resort data processing
- Domain
- resortdata.com
Incident
- Discovered
- Aug 21, 2023
- Materiality determined
- —
- Notification sent
- Oct 27, 2023
- Affected individuals
- 85
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 10 weeks(67 days from discovery to filing)
- Compliance flags
- ME AG >30d · 67dME resident >60d · 67d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 21, 2023→ Filed with AG: Oct 27, 202367d 30 days (soft) ME AG >30d Maine Discovered: Aug 21, 2023→ Notified: Oct 27, 202367d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.