HackingProfessional ServicesFinancial ServicesFinanceCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIILowContained
Deed Research, Inc.
bd_5f4cb2258f56e624 · schema v1 · pii pii-v1
Full breach record for Deed Research, Inc. →On January 25, 2025, Deed Research, Inc. — a back-office support provider for Midwest title and escrow companies — identified suspicious activity on its servers. Forensic investigation confirmed that documents containing personal information were exfiltrated. The scope of affected data was determined on April 2, 2025. Seven Maine residents were notified on May 20, 2025. The company is cooperating with law enforcement and offered 24-month credit monitoring via TransUnion/Cyberscout.
Maine clockDiscovered Jan 25, 2025 → Filed with AG May 2, 202597d ✗ ME AG >90d14 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_9f93e95d817f671fIndiana State AGfiled 2025-05-02Verified
- bd_e7b3ddcebb579d32Vermont State AGfiled 2025-05-02Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/343b01da-518a-414f-bdb6-f620a7dd8956.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 2, 2025
- Raw hash
- 487030956de6f89add4769062b241583cf70cb4a12133ed656a2ceef06877fe0
Reporting entity
- Name
- Deed Research, Inc.norm: deed research
- Industry
- Back-office support for title and escrow companies
Victim entity
- Name
- Deed Research, Inc.norm: deed research
- Industry
- Back-office support for title and escrow companies
- Industry
- Professional ServicesllmFinancial Servicesllm
Incident
- Discovered
- Jan 25, 2025
- Materiality determined
- Apr 2, 2025
- Notification sent
- May 20, 2025
- Affected individuals
- 7
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 Channel
- Threat actor
- External
Compliance
- Time to disclose
- 14 weeks(97 days from discovery to filing)
- Compliance flags
- ME AG >90d · 97dME resident >60d · 115d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 25, 2025→ Filed with AG: May 2, 202597d 90 days ME AG >90d Maine Discovered: Jan 25, 2025→ Notified: May 20, 2025115d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.