HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Penhall Company
bd_4de776dec448f0b6 · schema v1 · pii pii-v1
Full breach record for Penhall Company →Penhall Company, an Irving, Texas-based manufacturer, reported an external system breach (hacking) on December 28, 2022. The incident affected one Maine resident, whose driver's license number and name were acquired. Penhall notified the Maine Attorney General and provided one year of credit monitoring through Experian.
Maine clockDiscovered Dec 28, 2022 → Filed with AG Feb 15, 202349d ⏱ ME AG >30d7 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_78af2fa31cdd1e78California State AGfiled 2023-02-15Candidate
- bd_b0031b1b7ef3c4fdMontana State AGfiled 2023-02-15Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a78bb9bd-f69f-4940-bff9-3864bc5572ac.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 15, 2023
- Raw hash
- cef9130b1aff1cd6627171e851d681f0f9def9d348fc2cb87473ee80ea8c8563
Reporting entity
- Name
- Penhall Companynorm: penhall
Victim entity
- Name
- Penhall Companynorm: penhall
Incident
- Discovered
- Dec 28, 2022
- Materiality determined
- —
- Notification sent
- Feb 15, 2023
- Affected individuals
- 1
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 7 weeks(49 days from discovery to filing)
- Compliance flags
- ME AG >30d · 49d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 28, 2022→ Filed with AG: Feb 15, 202349d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.