HackingCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIILowContained
Umbrage
bd_3faa6e946f9d1d94 · schema v1 · pii pii-v1
Full breach record for Umbrage →Umbrage, a commercial entity headquartered in Houston, TX, experienced an unauthorized intrusion beginning August 7, 2025, discovered August 15, 2025. An unauthorized third party accessed and/or exfiltrated data files containing personal information. The scope of affected data was determined on October 21, 2025. Total persons affected: 156; Maine residents affected: 1. Kroll identity monitoring (24 months) offered to affected individuals.
Maine clockDiscovered Aug 15, 2025 → Filed with AG Nov 20, 202597d ✗ ME AG >90d14 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a2f19f52-e47a-4e3c-812c-6cf92a7fc1e9.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 20, 2025
- Raw hash
- a617629b87612858b2ae70b61caa8e57a261a8e9cb2793e33081198a34a3d89f
Reporting entity
- Name
- Umbragenorm: umbrage
- Domain
- umbrage.com
- Industry
- Other Commercial
Victim entity
- Name
- Umbragenorm: umbrage
- Domain
- umbrage.com
- Industry
- Other Commercial
Incident
- Discovered
- Aug 15, 2025
- Materiality determined
- Oct 21, 2025
- Notification sent
- Nov 20, 2025
- Affected individuals
- 1
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
Compliance
- Time to disclose
- 14 weeks(97 days from discovery to filing)
- Compliance flags
- ME AG >90d · 97dME resident >60d · 97d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 15, 2025→ Filed with AG: Nov 20, 202597d 90 days ME AG >90d Maine Discovered: Aug 15, 2025→ Notified: Nov 20, 202597d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.