HackingTechnologyInformationStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedData ExfiltratedPIIPCILowResolved
ServiceTitan, Inc. - UPDATED
bd_536886fdefc393de · schema v1 · pii pii-v1
Full breach record for ServiceTitan, Inc. - UPDATED →ServiceTitan, Inc. reported a data breach affecting 3 Maine residents (36 total). Salesforce, a third-party software platform used by ServiceTitan to store customer information, experienced unauthorized access on August 22, 2025, stemming from a security incident involving Salesloft Drift integrations. ServiceTitan completed its review on October 10, 2025. Impacted data includes names and payment card information. IDX credit monitoring (12 months) was offered to affected individuals.
Maine clockDiscovered Oct 10, 2025 → Filed with AG Oct 23, 202513d ✓ ME AG ≤30d13 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/74b23c00-d20c-45e2-94dd-2596e179b974.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 23, 2025
- Raw hash
- 7bb624a242334f6c510e773654e7b73c18c30d320b8fe8826807a48614f4040c
Reporting entity
- Name
- ServiceTitan, Inc. - UPDATEDnorm: servicetitan inc updated
- Domain
- servicetitan.com
- Industry
- Other Commercial
Victim entity
- Name
- ServiceTitan, Inc. - UPDATEDnorm: servicetitan inc updated
- Domain
- servicetitan.com
- Industry
- Other Commercial
- Industry
- Technologyllm
Incident
- Discovered
- Oct 10, 2025
- Materiality determined
- —
- Notification sent
- Oct 23, 2025
- Affected individuals
- 3
- Data types
- PIIPCI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Written notice provided to relevant state regulatorsNotice provided to three major credit reporting agencies: Equifax, Experian, TransUnion
- Third party
- via Salesforce
- Initial access
- supply_chain
Compliance
- Time to disclose
- 13 days(13 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 13d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 10, 2025→ Filed with AG: Oct 23, 202513d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.