HackingCustomer Data InvolvedPIIIDENTITY_BASICMediumContained
Barnhart Crane & Rigging Company, Inc.
bd_5f5ca5cd8893c241 · schema v1 · pii pii-v1
Full breach record for Barnhart Crane & Rigging Company, Inc. →Barnhart Crane & Rigging Company, Inc. reported an external system breach (hacking) occurring April 23-24, 2025, discovered on April 21, 2026. The incident affected 22,822 individuals, including 8 Maine residents. The company provided written notification and offered 12 months of Transunion credit monitoring and identity theft protection.
Maine clockDiscovered Apr 21, 2026 → Filed with AG May 21, 202630d ✓ ME AG ≤30d4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_ea66e1ba19df5882Vermont State AGfiled 2026-05-21Verified
- bd_fd55f3fbf55b820dOregon State AGfiled 2026-05-21Verified by operator
- bd_2e9649bf53ed38d1Texas State AGfiled 2026-05-22(1d gap)Verified by operator
- bd_8f1c23eb726072f0Massachusetts State AGfiled 2026-05-01(20d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/4d3b12cf-de52-4b14-ad76-68de73d453f4.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 21, 2026
- Raw hash
- f67f881b225364165af169fd954def4ee109cccfaa63b865fd9f0dd7a35a4ef1
Reporting entity
- Name
- Barnhart Crane & Rigging Company, Inc.norm: barnhart crane rigging
Victim entity
- Name
- Barnhart Crane & Rigging Company, Inc.norm: barnhart crane rigging
Incident
- Discovered
- Apr 21, 2026
- Materiality determined
- —
- Notification sent
- May 21, 2026
- Affected individuals
- 22,822
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 21, 2026→ Filed with AG: May 21, 202630d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.