UnknownGovernment IDFinancial accountPCICritical

Comstar LLC

bd_368a3c4d67f804f2 · schema v1 · pii pii-v1

Severity

Critical

Discovered

—

Filed

May 24, 2022

To disclose

—

Affected

306,058state residents only

Linked

13 filings

Confidence

95%

Full breach record for Comstar LLC →

Comstar, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-05-24. 306,058 Massachusetts residents were affected. The report records the breach type as electronic.

J jump to incidentP pin to compareR raw source

Massachusetts clock✓ MA credit monitoring due

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

May 24, 2022

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 13 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Indiana State AGbd_662700170b2a610b2022-05-25 · +1dVerified
HHS OCRbd_7c3a134ab345e7362022-05-26 · +2dVerified
New Hampshire State AGbd_0db5d3b9a664394c2022-05-27 · +3dVerified
California State AGbd_85177613717390c12022-06-14 · +21dVerified

Show 6 more filings ↓up to 1102d gap

Maine State AGbd_b95db5904d98be342022-06-30 · +37dVerified
California State AGbd_d818ee99f86b12dd2022-06-30 · +37dVerified
Maine State AGbd_1a59883a0195e6ff2022-08-22 · +90dVerified
California State AGbd_464f9d9da319c0212022-08-22 · +90dVerified
New Hampshire State AGbd_b57b40825eebd8b32022-08-26 · +94dVerified by operator
HHS OCR enforcementbd_431a2323ea15d5c32025-05-30 · +1102dVerified by operator

Showing first 10 of 12 linked disclosures.

Name: Comstar LLC
norm: comstar

Name: Comstar LLC
norm: comstar

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 306,058state-resident count only
Data types: Government IDFinancial accountPCI
Data elements: Social Security numberFinancial account numberDriver's licence numberPayment card number
Attack vector: Unknown

Compliance flags: MA credit monitoring due
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 5 states

View merged incident ↗

Massachusetts State AGMay 24 · first · this page

Indiana State AG+1d

HHS OCR+2d

New Hampshire State AG+3d

California State AG+21d

Maine State AG+37d

California State AG+37d

Maine State AG+90d

California State AG+90d

New Hampshire State AG+94d

HHS OCR enforcement+1102d

Pattern: first filing May 24 (MA), last May 30 — a 1102-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 12 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/data-breach-report-2022/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 24, 2022
Raw hash: 4679ccb1f6aec9832cb00470c02ac40d5436dfffd60be1e2b044f64d353bb9e5

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityComstar LLC

Victim entityComstar LLC

IncidentUnknown

ComplianceMA credit monitoring due

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov