HackingCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumContained
Georgetown Brewing Company
bd_44441ed00e966a82 · schema v1 · pii pii-v1
Full breach record for Georgetown Brewing Company →Georgetown Brewing Company (Seattle, WA) discovered on August 26, 2025 that a threat actor gained unauthorized access to their servers on August 22, 2025 and exfiltrated personal information including names and driver's license numbers. A total of 19,696 individuals were affected nationwide, with 3 Maine residents impacted. Notifications were sent on September 26, 2025. IDX identity protection services (24 months) were offered to affected individuals.
Maine clockDiscovered Aug 26, 2025 → Filed with AG Sep 26, 202531d ⏱ ME AG >30d4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
A leak claim by inc_ransom about this victim predates this filing by 35 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_e7b83d97438da500Leak Siteinc_ransomfiled 2025-08-22(35d gap)Verified
Regulatory filings (1) · sorted by filing gap
- bd_c62af42c4d23d1a2Vermont State AGfiled 2025-09-26Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/3c68cce3-312b-458b-9825-b2211b4b7230.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 26, 2025
- Raw hash
- b0be391ee27d60d309ff1b8a3402499e420c5ba7eee539b865127227e16a00f2
Reporting entity
- Name
- Georgetown Brewing Companynorm: georgetown brewing
- Domain
- georgetownbeer.com
- Industry
- Other Commercial
Victim entity
- Name
- Georgetown Brewing Companynorm: georgetown brewing
- Domain
- georgetownbeer.com
- Industry
- Other Commercial
Incident
- Discovered
- Aug 26, 2025
- Materiality determined
- —
- Notification sent
- Sep 26, 2025
- Affected individuals
- 3
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Reported to law enforcement
Compliance
- Time to disclose
- 4 weeks(31 days from discovery to filing)
- Compliance flags
- ME AG >30d · 31dLeak >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 26, 2025→ Filed with AG: Sep 26, 202531d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.