HackingCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSMediumResolved
Certified Automotive Lease Corp.
bd_376b3d3dc0de5ba4 · schema v1 · pii pii-v1
Full breach record for Certified Automotive Lease Corp. →Certified Automotive Lease Corp. dba CAL Automotive experienced an external system breach on September 18, 2021, affecting 68,837 individuals. The compromised data included names and financial account or credit/debit card numbers along with their access codes. The company began notifying affected individuals on October 26, 2021, and offered identity theft protection and credit monitoring services.
Maine clockDiscovered Sep 18, 2021 → Filed with AG Oct 29, 202141d ⏱ ME AG >30d6 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_a38aeb1003ce7359Montana State AGfiled 2021-10-29Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/fe46a094-fb98-4b4c-b195-852ee8cfa3c3.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 29, 2021
- Raw hash
- 3f23ad9c59a7a3fe4e71e52e17bf5ed227d80d9a074358ede09dc60142f30bdf
Reporting entity
- Name
- Certified Automotive Lease Corp.norm: certified automotive lease
Victim entity
- Name
- Certified Automotive Lease Corp.norm: certified automotive lease
- Industry
- Financial Services
Incident
- Discovered
- Sep 18, 2021
- Materiality determined
- —
- Notification sent
- Oct 26, 2021
- Affected individuals
- 68,837
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 6 weeks(41 days from discovery to filing)
- Compliance flags
- ME AG >30d · 41d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 18, 2021→ Filed with AG: Oct 29, 202141d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.