HackingVulnerability ExploitCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
General Insulation Company, Inc.
bd_50e73de935d3194c · schema v1 · pii pii-v1
Full breach record for General Insulation Company, Inc. →General Insulation Company, Inc. reported an external system breach (hacking) occurring on March 26, 2021, discovered on May 26, 2021. The incident affected 394 individuals, including 12 Maine residents. Acquired data included names and financial account or credit/debit card numbers (with security codes/PINs). The company provided written notification and offered 12 months of credit and identity theft monitoring protection through IDX.
Maine clockDiscovered May 26, 2021 → Filed with AG May 28, 20212d ✓ ME AG ≤30d2 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed394 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c2089198-96ec-4629-b9b2-e60c267dd5c7.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 28, 2021
- Raw hash
- c0d1206fb19803c014c221a71f8ea35dbfbccc8ddf130b430583dce1966a40b9
Reporting entity
- Name
- General Insulation Company, Inc.norm: general insulation
Victim entity
- Name
- General Insulation Company, Inc.norm: general insulation
Incident
- Discovered
- May 26, 2021
- Materiality determined
- —
- Notification sent
- May 28, 2021
- Affected individuals
- 394
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 2 days(2 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 2d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 26, 2021→ Filed with AG: May 28, 20212d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.