HackingTechnologyInformationSupply Chain (3P Vendor)Customer Data InvolvedDelayed DiscoveryPIILowContained
Flash Charm INC - (IDERA)
bd_2d7901da0cdc322b · schema v1 · pii pii-v1
Full breach record for Flash Charm INC - (IDERA) →Idera (Flash Charm, Inc.) reported unauthorized access to a third-party file-hosting system on August 23, 2025, detected October 31, 2025. Access did not extend to Idera products or systems. Affected data: names and basic contact information. 2,015 total individuals affected, including 2 Maine residents. Idera offered 24 months of IDX credit monitoring and identity protection services.
Maine clockDiscovered Oct 31, 2025 → Filed with AG Feb 26, 2026118d ✗ ME AG >90d17 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (2)
- bd_0e7b94b3609ded43Leak Sitecoinbasecartelfiled 2026-04-14(48d gap)Verified
- bd_2c5780cddd840d82Leak Sitecoinbasecartelfiled 2026-04-08(42d gap)Verified
Regulatory filings (1) · sorted by filing gap
- bd_cb0503c5a41f10f0Vermont State AGfiled 2026-02-26Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/5b02c0ae-bbed-47f3-b805-7942f4c37a0f.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 26, 2026
- Raw hash
- 3e134212e286b807771738af07809f25a3da2501a4b22294087dcd8cec35cfe3
Reporting entity
- Name
- Flash Charm INC - (IDERA)norm: flash charm inc idera
- Domain
- idera.com
- Industry
- Other Commercial
Victim entity
- Name
- Flash Charm INC - (IDERA)norm: flash charm inc idera
- Domain
- idera.com
- Industry
- Other Commercial
- Industry
- Technologyllm
Incident
- Discovered
- Oct 31, 2025
- Materiality determined
- —
- Notification sent
- Feb 26, 2026
- Affected individuals
- 2
- Data types
- PII
- Attack vector
- Unauthorized Access
- Threat actor
- External
- Regulator citations
- Notified federal law enforcementNotification submitted to Maine Attorney General
Compliance
- Time to disclose
- 17 weeks(118 days from discovery to filing)
- Compliance flags
- ME AG >90d · 118dME resident >60d · 118d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 31, 2025→ Filed with AG: Feb 26, 2026118d 90 days ME AG >90d Maine Discovered: Oct 31, 2025→ Notified: Feb 26, 2026118d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.