HackingCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumContained
Barr and Barr
bd_36280e2196be7b82 · schema v1 · pii pii-v1
Full breach record for Barr and Barr →On September 4, 2025, unknown external actors accessed Barr & Barr's computer network and exfiltrated files. The breach was discovered on November 6, 2025, following an investigation into suspicious network activity. The compromised data included names and Social Security numbers of 62 Maine residents. Barr & Barr notified affected individuals on December 4, 2025, and offered 12 months of Kroll credit monitoring and identity protection services.
Leak gap clock⏱ Leak >90d28 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
A leak claim by akira about this victim predates this filing by 91 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_5cf8932058aa8e7cLeak Siteakirafiled 2025-10-01(64d gap)Verified by operator
- bd_e6b082e130b11fd4Leak Siteakirafiled 2025-09-04(91d gap)Verified by operator
Regulatory filings (2) · sorted by filing gap
- bd_7322a31d2c653893Indiana State AGfiled 2025-12-04Verified
- bd_88b4177324f68d32Vermont State AGfiled 2025-12-04Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/03ea62a4-21c1-46ee-bb2c-0fec4fdd2f6e.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 4, 2025
- Raw hash
- b1e10a819fb303fc50c0ded70273a53a5d653947f5618cc8dd4b9143387f75c6
Reporting entity
- Name
- Barr and Barrnorm: barr and barr
- Domain
- barrandbarr.com
- Industry
- Other Commercial
Victim entity
- Name
- Barr and Barrnorm: barr and barr
- Domain
- barrandbarr.com
- Industry
- Other Commercial
Incident
- Discovered
- Nov 6, 2025
- Materiality determined
- —
- Notification sent
- Dec 4, 2025
- Affected individuals
- 62
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified Maine Attorney GeneralNotified federal law enforcement
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- Leak >90dME AG ≤30d · 28d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 6, 2025→ Filed with AG: Dec 4, 202528d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.