HackingCustomer Data InvolvedData ExfiltratedIDENTITY_GOVERNMENTMediumContained
Remarket Space
bd_63adb3603e3fdea8 · schema v1 · pii pii-v1
Full breach record for Remarket Space →Remarket Space, an Elk River, MN company, identified unauthorized access to its AWS S3 file storage system on October 28, 2025. The breach occurred on or before October 28, 2025 (noted as October 26, 2025 in the AG filing). Driver's license images for some users may have been accessed. No payment card data was compromised. 7,146 individuals were affected total; 4 Maine residents. Notifications were sent electronically on October 28, 2025.
Maine clockDiscovered Oct 28, 2025 → Filed with AG Nov 29, 202532d ⏱ ME AG >30d5 weeks discovery → filing
⚠ notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_277f82a2f19386edIndiana State AGfiled 2025-12-09(10d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/5edff591-3e2c-444a-ac79-58777e0afa4c.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 29, 2025
- Raw hash
- ab62e86c64a56d2aee0f5dd6ac4675a47645b65ed6adaf335fa2541c49fd9736
Reporting entity
- Name
- Remarket Spacenorm: remarket space
- Domain
- remarketspace.com
- Industry
- Other Commercial
Victim entity
- Name
- Remarket Spacenorm: remarket space
- Domain
- remarketspace.com
- Industry
- Other Commercial
Incident
- Discovered
- Oct 28, 2025
- Materiality determined
- —
- Notification sent
- Oct 28, 2025
- Affected individuals
- 4
- Data types
- IDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 5 weeks(32 days from discovery to filing)
- Compliance flags
- ME AG >30d · 32d
- Discovery-date grounding
- notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 28, 2025→ Filed with AG: Nov 29, 202532d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.