HackingCustomer Data InvolvedEmployee Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumContained
Corban OneSource, LLC
bd_28e8b0feb6148798 · schema v1 · pii pii-v1
Full breach record for Corban OneSource, LLC →On September 9, 2025, Corban OneSource, LLC identified unauthorized access to certain systems within their network. A file containing names and Social Security numbers of 2 Maine residents (employees, customers, or vendors) was accessed without authorization. Discovery was confirmed January 12, 2026. Written notifications were sent February 4, 2026. One-year Epiq credit monitoring was offered to affected individuals.
Leak gap clock⏱ Leak >90d23 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
A leak claim by qilin about this victim predates this filing by 124 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_04d1ab9350ae5a6bLeak Siteqilinfiled 2025-10-03(124d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c0502bd2-4671-473f-bf6c-8064ff699ff3.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 4, 2026
- Raw hash
- 8c28f806c10bcd2962cf988cfa7a3a5e36cf4ed13fc8d563ac0d9b751861b1c1
Reporting entity
- Name
- Corban OneSource, LLCnorm: corban onesource
- Domain
- corbanone.com
- Industry
- Other Commercial
Victim entity
- Name
- Corban OneSource, LLCnorm: corban onesource
- Domain
- corbanone.com
- Industry
- Other Commercial
Incident
- Discovered
- Jan 12, 2026
- Materiality determined
- Jan 12, 2026
- Notification sent
- Feb 4, 2026
- Affected individuals
- 2
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
- Regulator citations
- Law enforcement notified
Compliance
- Time to disclose
- 23 days(23 days from discovery to filing)
- Compliance flags
- Leak >90dME AG ≤30d · 23d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 12, 2026→ Filed with AG: Feb 4, 202623d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.