HackingData ExfiltratedPIIIDENTITY_GOVERNMENTHighContained
N&D Group
bd_3e3422b385fab4bb · schema v1 · pii pii-v1
Full breach record for N&D Group →N&D Group, a commercial entity based in Massachusetts, reported an external system breach (hacking) occurring on January 22, 2021, discovered on April 7, 2021. The incident affected 5,135 individuals, including 79 Maine residents. Personal information acquired included names and Social Security Numbers. The company provided written notification and offered 12 months of identity theft protection services.
Maine clockDiscovered Apr 7, 2021 → Filed with AG May 12, 202135d ⏱ ME AG >30d5 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed5,135 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c58d3516-5d57-4f01-8de5-069aa057f54a.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 12, 2021
- Raw hash
- b5d5489995ad69e6be1ca2bcb860dd840bf3f3b0a72dcd3be0e1d3c79ba6ae78
Reporting entity
- Name
- N&D Groupnorm: n d
- Domain
- ndgroup.com
Victim entity
- Name
- N&D Groupnorm: n d
- Domain
- ndgroup.com
Incident
- Discovered
- Apr 7, 2021
- Materiality determined
- —
- Notification sent
- May 12, 2021
- Affected individuals
- 5,135
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 5 weeks(35 days from discovery to filing)
- Compliance flags
- ME AG >30d · 35d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 7, 2021→ Filed with AG: May 12, 202135d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.