HackingStolen CredentialsCapture App DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIPCILowResolved
BCM ONE, INC.
bd_43334d96581e2669 · schema v1 · pii pii-v1
Full breach record for BCM ONE, INC. →BCM One, Inc. experienced an unauthorized access incident involving one employee email account between May 28 and July 11, 2024. The breach was discovered on December 4, 2024. The email account contained the name and payment card information of one Maine resident (161 total individuals affected). BCM One secured the account, conducted an investigation, and notified affected individuals on January 2, 2025. No identity theft protection services were offered.
Maine clockDiscovered Dec 4, 2024 → Filed with AG Jan 2, 202529d ✓ ME AG ≤30d29 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f6fea6bf-5c5f-449a-8cc4-ece92482503b.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 2, 2025
- Raw hash
- ccc340715aba4948adf846ee0c34317d5031ec9d44c5ef5e0cc21cbc3c6a8163
Reporting entity
- Name
- BCM ONE, INC.norm: bcm one
- Domain
- bcmone.com
- Industry
- Other Commercial
Victim entity
- Name
- BCM ONE, INC.norm: bcm one
- Domain
- bcmone.com
- Industry
- Other Commercial
Incident
- Discovered
- Dec 4, 2024
- Materiality determined
- —
- Notification sent
- Jan 2, 2025
- Affected individuals
- 1
- Data types
- PIIPCI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Notified Maine Attorney General per Me. Rev. Stat. Tit. 10, §1348
Compliance
- Time to disclose
- 29 days(29 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 29d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 4, 2024→ Filed with AG: Jan 2, 202529d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.