DisclosureLens
HackingProfessional ServicesProfessional ServicesData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumActive

SIRVA, INC.

bd_27f4567ee4db72f3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 12, 2024

Filed

Dec 19, 2024

To disclose

23 weeks

Affected · nationwide

8231 in this filing

Confidence

66%
Full breach record for SIRVA, INC. →8 incidents on file

Sirva Inc. filed a supplemental notice with the Maine Attorney General regarding an external system breach (hacking) occurring between August 16, 2023, and October 17, 2023. The breach affected 823 individuals total, including 1 Maine resident. Personal information, including names and Social Security numbers, was copied. Sirva notified affected individuals on December 19, 2024, and offered 12 months of credit monitoring through Kroll. The investigation is ongoing.

Maine clockDiscovered Jul 12, 2024 → Filed with AG Dec 19, 2024160d ✗ ME AG >90d23 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 331 days
discovery → filing · 23 weeks / 160 days

Aug 16, 2023

Begins

Jul 12, 2024

Discovered

Dec 19, 2024

Filed

vs. sector median

+6 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed823 affectedView incident
A leak claim by lockbit_3 about this victim predates this filing by 441 days.View originating leak claim

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.