HackingCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumContained
Civil Service Employees Association, Inc., Local 1000, AFSCME, AFL-CIO
bd_302889683ab05c6d · schema v1 · pii pii-v1
Full breach record for Civil Service Employees Association, Inc., Local 1000, AFSCME, AFL-CIO →Civil Service Employees Association, Inc. (CSEA), Local 1000, AFSCME, AFL-CIO experienced an external system breach (hacking) between May 3 and May 31, 2025, discovered on May 30, 2025. An unauthorized party accessed and exfiltrated files containing member names and Social Security Numbers. Total affected: 47,352 individuals; 6 Maine residents. Notification letters were sent January 20, 2026. No evidence of fraud or identity theft misuse was identified.
Maine clockDiscovered May 30, 2025 → Filed with AG Jan 20, 2026235d ✗ ME AG >90d34 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_3a7f8cfb83f1bfffIndiana State AGfiled 2026-01-20Verified
- bd_3c33615cec86aa28Vermont State AGfiled 2026-01-20Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/62a1b76c-627e-4d15-acc8-0638b3999b08.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 20, 2026
- Raw hash
- 0340b0f06cbd88581207de2c400e3aae3cd2a89a97a67b969eab8281fdbb6703
Reporting entity
- Name
- Civil Service Employees Association, Inc., Local 1000, AFSCME, AFL-CIOnorm: civil service employees association inc local 1000 afscme afl cio
- Industry
- Non-Profit
Victim entity
- Name
- Civil Service Employees Association, Inc., Local 1000, AFSCME, AFL-CIOnorm: civil service employees association inc local 1000 afscme afl cio
- Industry
- Non-Profit
Incident
- Discovered
- May 30, 2025
- Materiality determined
- —
- Notification sent
- Jan 20, 2026
- Affected individuals
- 6
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Maine Attorney General
Compliance
- Time to disclose
- 34 weeks(235 days from discovery to filing)
- Compliance flags
- ME AG >90d · 235dME resident >180d · 235d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 30, 2025→ Filed with AG: Jan 20, 2026235d 90 days ME AG >90d Maine Discovered: May 30, 2025→ Notified: Jan 20, 2026235d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.