HackingCustomer Data InvolvedDelayed DiscoveryPIILowContained
Powerhouse Retail Services
bd_3dfe3ea201afe4b2 · schema v1 · pii pii-v1
Full breach record for Powerhouse Retail Services →Powerhouse Retail Services (Crowley, TX) reported an external network breach occurring ~September 20, 2023, not discovered until January 22, 2026 (over 2 years later). An unauthorized individual accessed the network and may have viewed personal data. 34 Maine residents were among 7,856 total affected. Individuals offered 12 months of Epiq credit monitoring.
Maine clockDiscovered Jan 22, 2026 → Filed with AG Feb 3, 202612d ✓ ME AG ≤30d12 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_3f4af44caafcf9aeIndiana State AGfiled 2026-02-03Verified
- bd_512c8d67b1e6aac0Vermont State AGfiled 2026-02-03Verified
- bd_485a778092cf2ccaTexas State AGfiled 2026-02-04(1d gap)Verified
- bd_26e229a4b8303badNew Hampshire State AGfiled 2026-02-09(6d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/6fd7501f-5bfa-475e-825d-e4dd46387026.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 3, 2026
- Raw hash
- 869f6a128159c1cac366c35d1e63efa071c27274b23ae7ed93c2d7815818a14a
Reporting entity
- Name
- Powerhouse Retail Servicesnorm: powerhouse retail
- Domain
- powerhousenow.com
- Industry
- Other Commercial
Victim entity
- Name
- Powerhouse Retail Servicesnorm: powerhouse retail
- Domain
- powerhousenow.com
- Industry
- Other Commercial
Incident
- Discovered
- Jan 22, 2026
- Materiality determined
- Jan 22, 2026
- Notification sent
- Feb 3, 2026
- Affected individuals
- 34
- Data types
- PII
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 12 days(12 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 12d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 22, 2026→ Filed with AG: Feb 3, 202612d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.