HackingCustomer Data InvolvedPIIIDENTITY_GOVERNMENTMedium
SMRT Architects & Engineering
bd_4b5c38c3f72cdc8f · schema v1 · pii pii-v1
Full breach record for SMRT Architects & Engineering →SMRT Architects & Engineering experienced an external system breach on December 3, 2023, which was also the date of discovery. The breach affected 213 Maine residents, compromising their names and Social Security Numbers. The company provided written notification to the affected individuals on April 22, 2024, and offered 12 months of credit monitoring services through TransUnion.
Maine clockDiscovered Dec 3, 2023 → Filed with AG Apr 15, 2024134d ✗ ME AG >90d19 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_144dfaee22afe27fVermont State AGfiled 2024-04-22(7d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/9752f0ac-41cc-4bb7-a47e-c82587f8e667.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 15, 2024
- Raw hash
- 6df99a39e2a8426aa5165836d15aa5ef27cd36b8ded2d6b1f09ed50966353312
Reporting entity
- Name
- SMRT Architects & Engineeringnorm: smrt architects engineering
Victim entity
- Name
- SMRT Architects & Engineeringnorm: smrt architects engineering
Incident
- Discovered
- Dec 3, 2023
- Materiality determined
- —
- Notification sent
- Apr 22, 2024
- Affected individuals
- 213
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 19 weeks(134 days from discovery to filing)
- Compliance flags
- ME AG >90d · 134dME resident >60d · 141d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 3, 2023→ Filed with AG: Apr 15, 2024134d 90 days ME AG >90d Maine Discovered: Dec 3, 2023→ Notified: Apr 22, 2024141d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.