HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMedium
Jonas Fitness, Inc.
bd_60bbe20ecbfbd257 · schema v1 · pii pii-v1
Full breach record for Jonas Fitness, Inc. →Jonas Fitness, Inc., a point-of-sale vendor, reported an external system breach (hacking) that was discovered on June 1, 2023, the same day it occurred. The breach affected one Maine resident, compromising their name in combination with their driver's license or non-driver identification card number. The affected individual was notified in writing on August 1, 2023.
Maine clockDiscovered Jun 1, 2023 → Filed with AG Aug 1, 202361d ⏱ ME AG >30d9 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_b5b590074f3adf42Vermont State AGfiled 2023-08-01Verified
- bd_6de643245874becaNew Hampshire State AGfiled 2023-08-07(6d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/8a6d45c6-877a-47ef-b63c-6ef1dc503fc7.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 1, 2023
- Raw hash
- b3189bcaa3ba07af6a1d8a496649d0b61c339a321439a63ab7f2f0aa95855672
Reporting entity
- Name
- Jonas Fitness, Inc.norm: jonas fitness
- Domain
- jonasfitness.com
Victim entity
- Name
- Jonas Fitness, Inc.norm: jonas fitness
- Domain
- jonasfitness.com
Incident
- Discovered
- Jun 1, 2023
- Materiality determined
- —
- Notification sent
- Aug 1, 2023
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 9 weeks(61 days from discovery to filing)
- Compliance flags
- ME AG >30d · 61dME resident >60d · 61d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 1, 2023→ Filed with AG: Aug 1, 202361d 30 days (soft) ME AG >30d Maine Discovered: Jun 1, 2023→ Notified: Aug 1, 202361d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.