HackingCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumContained
Sterling
bd_618d97f7848957d3 · schema v1 · pii pii-v1
Full breach record for Sterling →On July 18, 2024, Sterling Corporation (Chelmsford, MA) discovered suspicious activity disrupting access to parts of its network. Systems were taken offline and experts engaged. On September 12, 2024, the company determined that personal information (name and Social Security number) may have been involved. A total of 1,303 individuals were affected, including 2 Maine residents. Notification was sent October 7, 2024. IDX identity protection services (12 months) were offered.
Leak gap clock✗ Leak >180d12 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
A leak claim by black_basta about this victim predates this filing by 659 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_66fcd1c1596f99d0New Hampshire State AGfiled 2024-10-08Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f00da51b-4516-4d56-98a7-0e0ca057a496.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 8, 2024
- Raw hash
- 4bfacfba7f3edb980f8beac8dd054d7a56690fa631f880148c4ba4288cae038a
Reporting entity
- Name
- Sterlingnorm: sterling
- Domain
- sterling.com
- Industry
- Other Commercial
Victim entity
- Name
- Sterlingnorm: sterling
- Domain
- sterling.com
- Industry
- Other Commercial
Incident
- Discovered
- Jul 18, 2024
- Materiality determined
- Sep 12, 2024
- Notification sent
- Oct 7, 2024
- Affected individuals
- 2
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 12 weeks(82 days from discovery to filing)
- Compliance flags
- Leak >180dME AG >30d · 82dME resident >60d · 81d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 18, 2024→ Filed with AG: Oct 8, 202482d 30 days (soft) ME AG >30d Maine Discovered: Jul 18, 2024→ Notified: Oct 7, 202481d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.