HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTMediumResolved
Syufy Enterprises, LP
bd_2e45a5a2a7373589 · schema v1 · pii pii-v1
Full breach record for Syufy Enterprises, LP →Syufy Enterprises, LP reported an external system breach (hacking) occurring on September 7, 2020, discovered on September 16, 2020. The incident compromised names and financial account numbers (including credit/debit card numbers with security codes/PINs) for 13,673 individuals, including one Maine resident. Written notification was sent on August 24, 2021. No identity theft protection services were offered.
Maine clockDiscovered Sep 16, 2020 → Filed with AG Aug 24, 2021342d ✗ ME AG >90d49 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_0f550cec5f51dd04Montana State AGfiled 2021-08-24Candidate
- bd_5578fb08d5d38b7fCalifornia State AGfiled 2021-08-24Verified
- bd_a1ff2e0817f33d35Oregon State AGfiled 2021-08-24Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/15dd9ade-1a9f-4f63-bf27-1308cd9f5ecd.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 24, 2021
- Raw hash
- 9599551c4ed27f9800ff91c8ebca5280279e6ec86fed8920f2e99fa0caaa4bb2
Reporting entity
- Name
- Syufy Enterprises, LPnorm: syufy enterprises
Victim entity
- Name
- Syufy Enterprises, LPnorm: syufy enterprises
Incident
- Discovered
- Sep 16, 2020
- Materiality determined
- —
- Notification sent
- Aug 24, 2021
- Affected individuals
- 13,673
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 49 weeks(342 days from discovery to filing)
- Compliance flags
- ME AG >90d · 342dME resident >180d · 342d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 16, 2020→ Filed with AG: Aug 24, 2021342d 90 days ME AG >90d Maine Discovered: Sep 16, 2020→ Notified: Aug 24, 2021342d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.