HackingCapture Stored DataData ExfiltratedCustomer Data InvolvedPIIPCILowContained
Sellmark Corporation
bd_481c301aa70aed91 · schema v1 · pii pii-v1
Full breach record for Sellmark Corporation →Sellmark Corporation (Mansfield, TX) suffered an external network intrusion occurring between March 10 and April 14, 2025. An unauthorized actor accessed the company's computer network and exfiltrated copies of files from its servers. The breach was discovered on August 14, 2025. Affected data included names and payment card information. One Maine resident was affected (1,408 total). Notifications were mailed September 11, 2025. The incident was reported to the FBI.
Maine clockDiscovered Aug 14, 2025 → Filed with AG Sep 11, 202528d ✓ ME AG ≤30d28 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_4e42db266ced1ff9Indiana State AGfiled 2025-09-11Verified
- bd_945f9c63c06c9753New Hampshire State AGfiled 2025-09-11Verified
- bd_68aa45d2d7f88a2aTexas State AGfiled 2025-09-12(1d gap)Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/25cbb7f0-35d6-4618-8310-e642b98fcbc0.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 11, 2025
- Raw hash
- e9dc98fea904354dfe7a3bfdb2e7ee8539530469ce767e5741ed738e0a53cae9
Reporting entity
- Name
- Sellmark Corporationnorm: sellmark
- Industry
- Other Commercial
Victim entity
- Name
- Sellmark Corporationnorm: sellmark
- Industry
- Other Commercial
Incident
- Discovered
- Aug 14, 2025
- Materiality determined
- —
- Notification sent
- Sep 11, 2025
- Affected individuals
- 1
- Data types
- PIIPCI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Reported to FBI/law enforcement
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 28d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 14, 2025→ Filed with AG: Sep 11, 202528d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.