HackingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIILowResolved
BFC Solutions
bd_30929684183bd71a · schema v1 · pii pii-v1
Full breach record for BFC Solutions →BFC Solutions (Nashville, TN) experienced a network disruption between June 18–20, 2024, during which unauthorized actors accessed or acquired data from its systems. The breach was discovered on June 11, 2025, after a thorough data review. 8,371 individuals were affected in total, including 14 Maine residents. Affected data included names combined with other personal data elements. Cyberscout/TransUnion credit monitoring was offered for 12 months.
Maine clockDiscovered Jun 11, 2025 → Filed with AG Aug 14, 202564d ⏱ ME AG >30d9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_5e401a63f130cfd7Indiana State AGfiled 2025-08-14Verified
- bd_9c19d279fe535bd1Texas State AGfiled 2025-08-15(1d gap)Verified
- bd_b9d2fc51487edc3aNew Hampshire State AGfiled 2025-08-18(4d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b3c7926f-88ed-425e-b4aa-11e49770e9f5.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 14, 2025
- Raw hash
- 87fb4aa23f48efab0dc91d4ade41565eefd0e1e4b499bcb7c0814504e72fa53b
Reporting entity
- Name
- BFC Solutionsnorm: bfc solutions
- Domain
- bfcsolutions.com
- Industry
- Other Commercial
Victim entity
- Name
- BFC Solutionsnorm: bfc solutions
- Domain
- bfcsolutions.com
- Industry
- Other Commercial
Incident
- Discovered
- Jun 11, 2025
- Materiality determined
- —
- Notification sent
- Aug 14, 2025
- Affected individuals
- 14
- Data types
- PII
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 9 weeks(64 days from discovery to filing)
- Compliance flags
- ME AG >30d · 64dME resident >60d · 64d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 11, 2025→ Filed with AG: Aug 14, 202564d 30 days (soft) ME AG >30d Maine Discovered: Jun 11, 2025→ Notified: Aug 14, 202564d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.