HackingRetail & ConsumerRetailCapture App DataVulnerability ExploitCustomer Data InvolvedData ExfiltratedPCIPIILowContained
Service Lighting & Electrical Supplies, Inc.
bd_39f9a73ca21d9034 · schema v1 · pii pii-v1
Full breach record for Service Lighting & Electrical Supplies, Inc. →Service Lighting, Inc. (Maple Grove, MN) discovered Feb 2, 2026 that its e-commerce site was injected with malicious code (web skimmer) capturing payment card data during checkout. Transactions Mar 12–Sep 16, 2025 were affected. Data involved: full names, card numbers, expiration dates, CVV codes. 151 Maine residents among 25,736 total individuals affected. No identity theft protection services offered.
Maine clockDiscovered Feb 2, 2026 → Filed with AG Mar 5, 202631d ⏱ ME AG >30d4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_629f45567b9be856Oregon State AGfiled 2026-03-05Verified by operator
- bd_d7188306de15b978Texas State AGfiled 2026-03-06(1d gap)Verified by operator
- bd_02734fad6e236147Indiana State AGfiled 2026-03-04(1d gap)Candidate
- bd_8631ed68eab105d4California State AGfiled 2026-03-04(1d gap)Verified by operator
Show 3 more filings ↓Show fewer ↑up to 4d gap
- bd_993241b084805503Indiana State AGfiled 2026-03-04(1d gap)Candidate
- bd_b7103c1db064e70fVermont State AGfiled 2026-03-04(1d gap)Verified
- bd_3b90264d81e98a0eNew Hampshire State AGfiled 2026-03-09(4d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1bf9bef7-a44a-427d-b01b-af3f22e30a6d.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 5, 2026
- Raw hash
- 5781d4503e77468e0606cd8358f1ecd8e3b3608d24348347e16390fd5530ad5d
Reporting entity
- Name
- Service Lighting & Electrical Supplies, Inc.norm: service lighting electrical supplies
- Industry
- Other Commercial
Victim entity
- Name
- Service Lighting & Electrical Supplies, Inc.norm: service lighting electrical supplies
- Industry
- Other Commercial
- Industry
- Retail & Consumerllm
Incident
- Discovered
- Feb 2, 2026
- Materiality determined
- Feb 2, 2026
- Notification sent
- Mar 4, 2026
- Affected individuals
- 151
- Data types
- PCIPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1056.003 Web Portal CaptureT1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 4 weeks(31 days from discovery to filing)
- Compliance flags
- ME AG >30d · 31d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 2, 2026→ Filed with AG: Mar 5, 202631d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.