DisclosureLens
HackingManufacturingCustomer Data InvolvedPIIGovernment IDHighResolved

CURBELL, INC.

bd_6358df1222455ec2 · schema v1 · pii pii-v1

Severity

High

Discovered

Mar 31, 2021

Filed

Jul 28, 2021

To disclose

17 weeks

Affected · nationwide

1,3581 in this filing

Linked

4 filings

Confidence

75%
Full breach record for CURBELL, INC. →

Curbell Inc. experienced an external system breach where an unauthorized party gained access to its systems. The breach, which occurred on March 18, 2021, and was discovered on March 31, 2021, resulted in the exposure of personal information, including names and Social Security numbers. One Maine resident was affected. The company offered one year of credit monitoring and identity protection services through Experian.

Maine clockDiscovered Mar 31, 2021 → Filed with AG Jul 28, 2021119d ✗ ME AG >90d17 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 13 days
discovery → filing · 17 weeks / 119 days

Mar 18, 2021

Begins

Mar 31, 2021

Discovered

Jul 28, 2021

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
Massachusetts State AGJul 28 · first
Montana State AGJul 28 · first
Maine State AGJul 28 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.