HackingCustomer Data InvolvedIDENTITY_GOVERNMENTOTHERMediumContained
Credit Technologies, Inc
bd_5bd4b501efa099a4 · schema v1 · pii pii-v1
Full breach record for Credit Technologies, Inc →Credit Technologies, Inc reported an external system breach (hacking) occurring on 09/09/2025. The breach was discovered on 04-10-2026. The incident affected 1022 total persons, including 1 Maine resident. Identity and other personal information were compromised. The company offered 12 months of Kroll identity monitoring services to affected individuals.
Maine clockDiscovered Apr 10, 2026 → Filed with AG Apr 27, 202617d ✓ ME AG ≤30d17 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_30efa5fba8f202faIndiana State AGfiled 2026-04-27Candidate
- bd_5fe5e5e4deb41ac2Vermont State AGfiled 2026-04-27Verified
- bd_76d779580c553f52New Hampshire State AGfiled 2026-04-27Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/670f6417-c862-4a13-85af-566315fecd85.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 27, 2026
- Raw hash
- 9d44991f224070f79f2107b9c7da21d1019c625dc551cd0c0e86b010d95669c8
Reporting entity
- Name
- McDonald Hopkins (on behalf of Credit Technologies, Inc)norm: mcdonald hopkins on behalf of credit
Victim entity
- Name
- Credit Technologies, Incnorm: credit technologies
Incident
- Discovered
- Apr 10, 2026
- Materiality determined
- —
- Notification sent
- Apr 27, 2026
- Affected individuals
- 1
- Data types
- IDENTITY_GOVERNMENTOTHER
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 17 days(17 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 17d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 10, 2026→ Filed with AG: Apr 27, 202617d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.