HackingCapture Stored DataData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedPIIIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTEMPLOYMENTMediumContained
Stoss Landscape Urbanism
bd_41659a1b5e2aac21 · schema v1 · pii pii-v1
Full breach record for Stoss Landscape Urbanism →On September 14, 2025, an unauthorized third party gained access to Stoss Landscape Urbanism's network and exfiltrated files. The breach was discovered on October 10, 2025. Affected data included names, Social Security numbers, bank information, passport information, phone numbers, email addresses, and employment-related information. 77 individuals total were affected, including 1 Maine resident. Notifications were sent December 23, 2025. Experian IdentityWorks (24 months) was offered.
Maine clockDiscovered Oct 10, 2025 → Filed with AG Jan 9, 202691d ✗ ME AG >90d13 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
A leak claim by akira about this victim predates this filing by 91 days.View originating leak claim
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f5eb5538-d3ae-47c1-8857-ffa3fb2f180e.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 9, 2026
- Raw hash
- d709748a7a917bf9815aeae74ef4fdc0021a17ca6f4fba2c1c749de194a45870
Reporting entity
- Name
- Stoss Landscape Urbanismnorm: stoss landscape urbanism
- Domain
- stoss.net
- Industry
- Other Commercial
Victim entity
- Name
- Stoss Landscape Urbanismnorm: stoss landscape urbanism
- Domain
- stoss.net
- Industry
- Other Commercial
Incident
- Discovered
- Oct 10, 2025
- Materiality determined
- —
- Notification sent
- Dec 23, 2025
- Affected individuals
- 1
- Data types
- PIIIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTEMPLOYMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Reported to law enforcement
Compliance
- Time to disclose
- 13 weeks(91 days from discovery to filing)
- Compliance flags
- ME AG >90d · 91dME resident >60d · 74dLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 10, 2025→ Filed with AG: Jan 9, 202691d 90 days ME AG >90d Maine Discovered: Oct 10, 2025→ Notified: Dec 23, 202574d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.