HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumResolved
STI Holdings, Inc.
bd_30d2e0b29b5e18b2 · schema v1 · pii pii-v1
Full breach record for STI Holdings, Inc. →STI Holdings, Inc. experienced a data breach affecting one Maine resident. The breach, which was an external system breach (hacking), occurred between May 25, 2023, and June 9, 2023, and was discovered on September 28, 2023. The compromised information includes names and Social Security numbers. The company began notifying affected individuals on December 2, 2023, and offered 12 months of credit monitoring services.
Maine clockDiscovered Sep 28, 2023 → Filed with AG Dec 4, 202367d ⏱ ME AG >30d10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
A leak claim by arvinclub about this victim predates this filing by 103 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_1a472194226a1ff2Leak Sitearvinclubfiled 2023-08-23(103d gap)Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/9add8e5d-e67b-4f44-b770-71350dc6249b.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 4, 2023
- Raw hash
- 6c51548bf0a3a6bcf842a75e364dbcfe7512a7233d3de236990e9c0e49b3ddf7
Reporting entity
- Name
- STI Holdings, Inc.norm: sti holdings
Victim entity
- Name
- STI Holdings, Inc.norm: sti holdings
Incident
- Discovered
- Sep 28, 2023
- Materiality determined
- —
- Notification sent
- Dec 2, 2023
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 10 weeks(67 days from discovery to filing)
- Compliance flags
- ME AG >30d · 67dME resident >60d · 65dLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 28, 2023→ Filed with AG: Dec 4, 202367d 30 days (soft) ME AG >30d Maine Discovered: Sep 28, 2023→ Notified: Dec 2, 202365d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.