HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Roy & Rurak
bd_2c4e7e8885669597 · schema v1 · pii pii-v1
Full breach record for Roy & Rurak →Roy & Rurak, a commercial entity based in North Andover, MA, reported an external system breach (hacking) discovered on 12/29/2021. The incident affected 1,774 individuals, including 14 Maine residents. Personal information acquired included names and Social Security Numbers. The entity provided written notification to affected individuals on 03/16/2022 and offered 24 months of identity theft protection services.
Maine clockDiscovered Dec 29, 2021 → Filed with AG Mar 21, 202282d ⏱ ME AG >30d12 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_31c1e2da6ea47305New Hampshire State AGfiled 2022-03-21Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a8e9c291-4796-4b6e-992a-4ab42caa030f.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 21, 2022
- Raw hash
- ab58f43176f586e9c985baaa5f834f074d04629876c72daaf4b230585dac48f2
Reporting entity
- Name
- Roy & Ruraknorm: roy rurak
Victim entity
- Name
- Roy & Ruraknorm: roy rurak
Incident
- Discovered
- Dec 29, 2021
- Materiality determined
- —
- Notification sent
- Mar 16, 2022
- Affected individuals
- 1,774
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 12 weeks(82 days from discovery to filing)
- Compliance flags
- ME AG >30d · 82dME resident >60d · 77d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 29, 2021→ Filed with AG: Mar 21, 202282d 30 days (soft) ME AG >30d Maine Discovered: Dec 29, 2021→ Notified: Mar 16, 202277d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.