HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
CAIRE Inc.
bd_2b42633e6b288078 · schema v1 · pii pii-v1
Full breach record for CAIRE Inc. →CAIRE Inc. reported an external system breach (hacking) occurring on February 11, 2023, discovered on July 21, 2023. The incident compromised the names and Social Security Numbers of 2,607 individuals, including 1 Maine resident. CAIRE Inc. sent written notifications on March 5, 2024, and provided 12 months of credit monitoring and identity restoration services through TransUnion.
Maine clockDiscovered Jul 21, 2023 → Filed with AG Mar 5, 2024228d ✗ ME AG >90d33 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_4308ec6cb0232b32Vermont State AGfiled 2024-03-05Verified
- bd_797cc5bbc6be454bNew Hampshire State AGfiled 2024-03-05Verified
- bd_8bf9ac5965597702Indiana State AGfiled 2024-03-05Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/bdccb347-d6f7-43f8-a55c-5eecdd3e7311.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 5, 2024
- Raw hash
- 8518105a150554b7ebcf8ab8f099d1f781f6fa5061cfc539865f39b92cf4d91b
Reporting entity
- Name
- CAIRE Inc.norm: caire
Victim entity
- Name
- CAIRE Inc.norm: caire
Incident
- Discovered
- Jul 21, 2023
- Materiality determined
- —
- Notification sent
- Mar 5, 2024
- Affected individuals
- 2,607
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 33 weeks(228 days from discovery to filing)
- Compliance flags
- ME AG >90d · 228dME resident >180d · 228d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 21, 2023→ Filed with AG: Mar 5, 2024228d 90 days ME AG >90d Maine Discovered: Jul 21, 2023→ Notified: Mar 5, 2024228d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.