HackingCustomer Data InvolvedPIIIDENTITY_BASICMediumContained
Hallcon
bd_556f27b3120ec7f9 · schema v1 · pii pii-v1
Full breach record for Hallcon →Hallcon Corporation, via vendor First Advantage Corporation, reported an external system breach (hacking) occurring on November 13, 2025, discovered on November 17, 2025. The incident affected 4,669 individuals, including 3 Maine residents. The breach involved the acquisition of names and personal identifiers. Affected individuals received written notification on April 21, 2026, and were offered 24 months of credit monitoring and identity theft protection services through Cyberscout (TransUnion).
Maine clockDiscovered Nov 17, 2025 → Filed with AG May 28, 2026192d ✗ ME AG >90d27 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4,669 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/52f76946-9c12-4222-a7dc-7a9fc7101ce4.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 28, 2026
- Raw hash
- ef813bae4edb2f130790ddfc5a3ddd1d08180863eae6d67000e6674c3036a6b0
Reporting entity
- Name
- First Advantage Corporation on behalf of Hallcon Corporationnorm: first advantage corporation on behalf of hallcon
Victim entity
- Name
- Hallconnorm: hallcon
- Domain
- hallcon.lllcdriving.com
Incident
- Discovered
- Nov 17, 2025
- Materiality determined
- —
- Notification sent
- Apr 21, 2026
- Affected individuals
- 4,669
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 27 weeks(192 days from discovery to filing)
- Compliance flags
- ME AG >90d · 192dME resident >60d · 155d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 17, 2025→ Filed with AG: May 28, 2026192d 90 days ME AG >90d Maine Discovered: Nov 17, 2025→ Notified: Apr 21, 2026155d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.