HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
PPA Holdings, Inc.
bd_43cfc14ff762b622 · schema v1 · pii pii-v1
Full breach record for PPA Holdings, Inc. →PPA Holdings, Inc. (operating as Filters Now, LLC) reported an external system breach (hacking) occurring between July 23, 2019, and March 8, 2022, discovered on May 31, 2022. The incident compromised names and financial account/credit card numbers (with security codes/PINs) for 34,477 individuals, including 72 Maine residents. Written notification was sent on July 19, 2022. No identity theft protection services were offered. The breach was reported to the Maine Attorney General.
Maine clockDiscovered May 31, 2022 → Filed with AG Jul 19, 202249d ⏱ ME AG >30d7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_b7c61c9dfd837804Washington State AGfiled 2022-07-19Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/211f27d8-24e5-447a-b40c-a597e0e7d4e8.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 19, 2022
- Raw hash
- 6a2f37ee9d35cf8bd7937e03dcb4a3e87bd56c61bbfd6ca07d99ec1910eb5f2d
Reporting entity
- Name
- Freudenberg Filtration Technologies LPnorm: freudenberg filtration
Victim entity
- Name
- PPA Holdings, Inc.norm: ppa holdings
Incident
- Discovered
- May 31, 2022
- Materiality determined
- —
- Notification sent
- Jul 19, 2022
- Affected individuals
- 34,477
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 7 weeks(49 days from discovery to filing)
- Compliance flags
- ME AG >30d · 49d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 31, 2022→ Filed with AG: Jul 19, 202249d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.