HackingCustomer Data InvolvedLow
NFI North
bd_58691ec86d23b789 · schema v1 · pii pii-v1
Full breach record for NFI North →NFI North, a non-profit organization, reported a data breach affecting 49 Maine residents. The breach, described as an external system breach (hacking), occurred on September 1, 2025, and was discovered on November 5, 2025. Affected individuals were notified on November 13, 2025. NFI North is offering 12 months of credit monitoring services through TransUnion.
Maine clockDiscovered Nov 5, 2025 → Filed with AG Nov 13, 20258d ✓ ME AG ≤30d8 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_1196ad8fd7fe17cbNew Hampshire State AGfiled 2025-11-13Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/edd24aa5-8a41-4d35-8d2d-e55cb7af4fba.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 13, 2025
- Raw hash
- 3cfd9479b1352f25ef04c6844e37dd890e24b01dd9cb4099580e03589e229076
Reporting entity
- Name
- NFI Northnorm: nfi north
Victim entity
- Name
- NFI Northnorm: nfi north
Incident
- Discovered
- Nov 5, 2025
- Materiality determined
- —
- Notification sent
- Nov 13, 2025
- Affected individuals
- 49
- Data types
- —
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 8 days(8 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 8d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 5, 2025→ Filed with AG: Nov 13, 20258d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.