HackingProfessional ServicesProfessional ServicesData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIILowContained
Charlottesville Settlement Company
bd_2e647ce081b521a0 · schema v1 · pii pii-v1
Full breach record for Charlottesville Settlement Company →Charlottesville Settlement Company (and affiliates Shenandoah Settlement Services and Freedom Settlement Services) reported an external network breach. An unknown actor gained unauthorized access on September 2, 2025; unusual activity was observed on September 4, 2025. A comprehensive data review completed March 10, 2026 determined personal information may have been accessed or acquired. 22,041 individuals affected total; 19 Maine residents. Consumer notification sent March 18, 2026.
Maine clockDiscovered Mar 10, 2026 → Filed with AG Mar 18, 20268d ✓ ME AG ≤30d8 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed19 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/073e2a3e-ca04-4c49-8ebe-d42f736a2632.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 18, 2026
- Raw hash
- f217618d0f65e7cd0fafd09fb76fa42d4ef3ff218cbef81a34f06fe0406ad853
Reporting entity
- Name
- Charlottesville Settlement Companynorm: charlottesville settlement
- Industry
- Other Commercial
Victim entity
- Name
- Charlottesville Settlement Companynorm: charlottesville settlement
- Industry
- Other Commercial
- Industry
- Professional Servicesllm
Incident
- Discovered
- Mar 10, 2026
- Materiality determined
- Mar 10, 2026
- Notification sent
- Mar 18, 2026
- Affected individuals
- 19
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 8 days(8 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 8d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 10, 2026→ Filed with AG: Mar 18, 20268d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.