HackingEmployee Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Penquis Cap
bd_32666225b2cfab98 · schema v1 · pii pii-v1
Full breach record for Penquis Cap →Penquis CAP (non-profit, Bangor ME) experienced an external system breach Dec 11-12, 2025. Suspicious network activity was discovered Dec 12; on Dec 18, 2025 it was determined employee files with names and Social Security numbers may have been accessed. 490 Maine residents (494 total) affected. Third-party forensic investigation engaged. Notification sent Jan 30, 2026. Cyberscout credit monitoring offered for 12 months.
Maine clockDiscovered Dec 18, 2025 → Filed with AG Feb 5, 202649d ⏱ ME AG >30d7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed490 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c2e8b68b-bdef-4fc8-ad75-a5459f60edae.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 5, 2026
- Raw hash
- 2d2c00dc0b681ed661f9f8de753f05beacfae686ea0cd571442e5f5fc2a5ab4f
Reporting entity
- Name
- Penquis Capnorm: penquis cap
- Industry
- Non-Profit
Victim entity
- Name
- Penquis Capnorm: penquis cap
- Industry
- Non-Profit
Incident
- Discovered
- Dec 18, 2025
- Materiality determined
- Dec 18, 2025
- Notification sent
- Jan 30, 2026
- Affected individuals
- 490
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 7 weeks(49 days from discovery to filing)
- Compliance flags
- ME AG >30d · 49d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 18, 2025→ Filed with AG: Feb 5, 202649d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.