HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
THE CORNWELL QUALITY TOOLS COMPANY
bd_48358d610e830741 · schema v1 · pii pii-v1
Full breach record for THE CORNWELL QUALITY TOOLS COMPANY →Cornwell Quality Tools experienced an external system breach (hacking) on September 22, 2022, discovered on August 23, 2023. The incident affected 11,884 individuals, including 74 Maine residents. Acquired data included names combined with driver's license numbers. The company provided written notification and offered 12 months of credit monitoring and identity protection services through IDX.
Leak gap clock✗ Leak >180d6 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by hive about this victim predates this filing by 295 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_0ddd24cf67f84c8aMontana State AGfiled 2023-08-29Candidate
- bd_2cb7683973c6c8d4California State AGfiled 2023-08-29Verified
- bd_a57b84ec9f46f1f6New Hampshire State AGfiled 2023-08-29Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/03e9b627-f5fd-4940-be00-50e4201a8f26.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 29, 2023
- Raw hash
- 9ac7bf17a843b4213daffddfd664ad75a281bd4ad74dc1ebdc2cae629e708522
Reporting entity
- Name
- THE CORNWELL QUALITY TOOLS COMPANYnorm: the cornwell quality tools
Victim entity
- Name
- THE CORNWELL QUALITY TOOLS COMPANYnorm: the cornwell quality tools
Incident
- Discovered
- Aug 23, 2023
- Materiality determined
- —
- Notification sent
- Aug 29, 2023
- Affected individuals
- 11,884
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General's Office
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 days(6 days from discovery to filing)
- Compliance flags
- Leak >180dME AG ≤30d · 6d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 23, 2023→ Filed with AG: Aug 29, 20236d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.