HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
AireSpring, Inc.
bd_3df0cbbadafe99fb · schema v1 · pii pii-v1
Full breach record for AireSpring, Inc. →AireSpring, Inc. reported an external system breach (hacking) occurring on April 7, 2021, affecting 3,671 individuals, including 8 Maine residents. The breach compromised names and Social Security Numbers. AireSpring provided written notification on June 10, 2021, and offered one year of credit monitoring, dark web monitoring, and ID theft insurance.
Maine clockDiscovered Apr 7, 2021 → Filed with AG Jun 10, 202164d ⏱ ME AG >30d9 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_1ff94ac48512112fMontana State AGfiled 2021-06-10Candidate
- bd_2782ac2cd9a65b79California State AGfiled 2021-06-10Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/12a4d27b-d2fb-4adf-b55b-34cedadd42b8.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 10, 2021
- Raw hash
- 3ff19b958ff345799174bd8c844874e834ec499500d94b2fd60e6c23f8918196
Reporting entity
- Name
- AireSpring, Inc.norm: airespring
Victim entity
- Name
- AireSpring, Inc.norm: airespring
Incident
- Discovered
- Apr 7, 2021
- Materiality determined
- —
- Notification sent
- Jun 10, 2021
- Affected individuals
- 3,671
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 weeks(64 days from discovery to filing)
- Compliance flags
- ME AG >30d · 64dME resident >60d · 64d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 7, 2021→ Filed with AG: Jun 10, 202164d 30 days (soft) ME AG >30d Maine Discovered: Apr 7, 2021→ Notified: Jun 10, 202164d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.