HackingCustomer Data InvolvedDelayed DiscoveryPIILowContained
Nixon, Inc.
bd_4abfc1be89970cd7 · schema v1 · pii pii-v1
Full breach record for Nixon, Inc. →Nixon, Inc. (Carlsbad, CA) experienced an external system breach (hacking) discovered on December 18, 2024, in which an unauthorized individual accessed files containing personal information. The investigation concluded on April 18, 2025. Six Maine residents were affected. Law enforcement was notified and a third-party forensic firm was engaged. Affected individuals were offered 12 months of IDX credit monitoring and identity protection services. Consumer notifications were sent on May 2, 2025.
Maine clockDiscovered Dec 18, 2024 → Filed with AG May 6, 2025139d ✗ ME AG >90d20 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_3f353176b265e2ceVermont State AGfiled 2025-05-02(4d gap)Verified
- bd_9df56baa730ea6beCalifornia State AGfiled 2025-05-02(4d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/05fe8300-1c34-4ff2-b8da-1e1f935134d9.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 6, 2025
- Raw hash
- 057879177ee80fe10f9d14d4c85efd752ff70abff2fa4d544668767c56e961fc
Reporting entity
- Name
- Nixon, Inc.norm: nixon
- Industry
- Other Commercial
Victim entity
- Name
- Nixon, Inc.norm: nixon
- Industry
- Other Commercial
Incident
- Discovered
- Dec 18, 2024
- Materiality determined
- Apr 18, 2025
- Notification sent
- May 2, 2025
- Affected individuals
- 6
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 20 weeks(139 days from discovery to filing)
- Compliance flags
- ME AG >90d · 139dME resident >60d · 135d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 18, 2024→ Filed with AG: May 6, 2025139d 90 days ME AG >90d Maine Discovered: Dec 18, 2024→ Notified: May 2, 2025135d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.