HackingCustomer Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
CIS Group of Companies, LLC
bd_5106dd52459ddaa8 · schema v1 · pii pii-v1
Full breach record for CIS Group of Companies, LLC →CIS Group, LLC experienced an external system breach on February 7, 2022, which was discovered the same day. The incident compromised the names and Social Security numbers of 11 Maine residents. The company offered affected individuals 12 months of credit and identity monitoring services through IDX.
Maine clockDiscovered Feb 7, 2022 → Filed with AG Jul 16, 2022159d ✗ ME AG >90d23 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed11 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f39456ab-ae1f-44f0-86af-f013e1db93ba.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 16, 2022
- Raw hash
- b1ae25379677705fb49d02a410e53f76728b5c3299d608374802515c8d74fb98
Reporting entity
- Name
- CIS Group of Companies, LLCnorm: cis group of companies
Victim entity
- Name
- CIS Group of Companies, LLCnorm: cis group of companies
Incident
- Discovered
- Feb 7, 2022
- Materiality determined
- —
- Notification sent
- Jul 15, 2022
- Affected individuals
- 11
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 23 weeks(159 days from discovery to filing)
- Compliance flags
- ME AG >90d · 159dME resident >60d · 158d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 7, 2022→ Filed with AG: Jul 16, 2022159d 90 days ME AG >90d Maine Discovered: Feb 7, 2022→ Notified: Jul 15, 2022158d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.