HackingCustomer Data InvolvedLow
DePaoli Mosaic Company
bd_65f070645ecb54fa · schema v1 · pii pii-v1
Full breach record for DePaoli Mosaic Company →DePaoli Mosaic Company experienced an external system breach on July 2, 2025, which was also the date of discovery. The breach affected 100 individuals, including one resident of Maine. In response, the company began notifying affected consumers on December 5, 2025, and offered 24 months of identity theft protection services.
Maine clockDiscovered Jul 2, 2025 → Filed with AG Dec 5, 2025156d ✗ ME AG >90d22 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_51c93c72c092ec90New Hampshire State AGfiled 2025-12-05Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/2be33924-0ba2-4c87-8634-9d5b61e6f8ad.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 5, 2025
- Raw hash
- 74c510cb2ed74fd734fe3e47e7821af3ee634d0c399dbb04c4cc57ea498c0ddd
Reporting entity
- Name
- DePaoli Mosaic Companynorm: depaoli mosaic
Victim entity
- Name
- DePaoli Mosaic Companynorm: depaoli mosaic
Incident
- Discovered
- Jul 2, 2025
- Materiality determined
- —
- Notification sent
- Dec 5, 2025
- Affected individuals
- 1
- Data types
- —
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 22 weeks(156 days from discovery to filing)
- Compliance flags
- ME AG >90d · 156dME resident >60d · 156d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 2, 2025→ Filed with AG: Dec 5, 2025156d 90 days ME AG >90d Maine Discovered: Jul 2, 2025→ Notified: Dec 5, 2025156d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.