HackingCustomer Data InvolvedLowContained
2nd Swing
bd_45d639decaa875cb · schema v1 · pii pii-v1
Full breach record for 2nd Swing →2nd Swing reported an external system breach (hacking) occurring on March 30, 2026, discovered on March 31, 2026. The incident affected 222 individuals total, including 2 Maine residents. Notification was sent on May 7, 2026, and identity theft protection services were offered for 12 months.
Maine clockDiscovered Mar 31, 2026 → Filed with AG May 7, 202637d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_720e40cc0a6b7555Indiana State AGfiled 2026-05-07Candidate
- bd_b84ea95ba0de01cfNew Hampshire State AGfiled 2026-05-07Verified
- bd_77585d12151af21aMassachusetts State AGfiled 2026-05-01(6d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/58bff8f4-496f-4b1d-8575-f6d88de7c23c.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 7, 2026
- Raw hash
- 67e02cd27506509da77f99fdb4b193d3c2685bb5781d095e33b4d5d6071134d9
Reporting entity
- Name
- Ciprianinorm: cipriani
- Domain
- cipriani.com
Victim entity
- Name
- 2nd Swingnorm: 2nd swing
- Domain
- 2ndswing.com
Incident
- Discovered
- Mar 31, 2026
- Materiality determined
- —
- Notification sent
- May 7, 2026
- Affected individuals
- 222
- Data types
- —
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 5 weeks(37 days from discovery to filing)
- Compliance flags
- ME AG >30d · 37d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 31, 2026→ Filed with AG: May 7, 202637d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.