DisclosureLens
HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedIdentity (basic)Government IDMediumActive

Penquis Cap

bd_32666225b2cfab98 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 12, 2025

Filed

Feb 5, 2026

To disclose

8 weeks

Affected · nationwide

494490 in this filing

Linked

2 filings

Confidence

66%
Full breach record for Penquis Cap →2 incidents on file

Penquis CAP reported an external system breach (hacking) occurring December 11-12, 2025, discovered December 12, 2025. The incident potentially exposed employee names and Social Security numbers. 494 individuals were affected, including 490 Maine residents. Penquis CAP engaged forensic specialists and is offering 12 months of credit monitoring. Notification was sent January 30, 2026.

Maine clockDiscovered Dec 12, 2025 → Filed with AG Feb 5, 202655d ⏱ ME AG >30d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 1 days
discovery → filing · 8 weeks / 55 days

Dec 11, 2025

Begins

Dec 12, 2025

Discovered

Feb 5, 2026

Filed

vs. sector median

11 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings · 2 states

View merged incident ↗
Massachusetts State AGFeb 5 · first
Maine State AGFeb 5 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.