HackingCustomer Data InvolvedPIIGovernment IDHighResolved

American Frame Corporation

bd_6742a8cb5abf4d18 · schema v1 · pii pii-v1

Severity

High

Discovered

Aug 1, 2020

Filed

Jan 25, 2021

To disclose

25 weeks

Affected · nationwide

30,502308 in this filing

Linked

9 filings

Confidence

50%

Full breach record for American Frame Corporation →

American Frame Corporation experienced an external system breach on August 1, 2020, which was discovered the same day. The breach affected 30,502 individuals, including 308 Maine residents. The compromised information includes names and Social Security numbers. Affected individuals were notified on January 14, 2021, and offered 12 months of identity theft protection services through ID Experts Corp.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Aug 1, 2020 → Filed with AG Jan 25, 2021177d ✗ ME AG >90d25 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 25 weeks / 177 days

Aug 1, 2020

Begins

Aug 1, 2020

Discovered

Jan 25, 2021

Filed

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

California State AGbd_2664ce40a4d83da62021-01-25Verified
Washington State AGbd_73e00082633041212021-01-25Verified
Idaho State AGbd_7f11b445287ba87a2021-01-25Verified
Oregon State AGbd_dd80bc80763b9b512021-01-25Verified

Show 4 more filings ↓up to 11d gap

Massachusetts State AGbd_bb12635c734bd0662021-01-27 · +2dVerified
New Hampshire State AGbd_1ecdc4efcde9d38c2021-02-01 · +7dVerified
Indiana State AGbd_eedd764a9999e6782021-01-14 · +11dVerified
Montana State AGbd_ef07f78a5213490d2021-01-14 · +11dCandidate

Name: American Frame Corporation
norm: american frame
Domain: americanframe.com

Name: American Frame Corporation
norm: american frame
Domain: americanframe.com

Discovered: Aug 1, 2020
Breach occurred: Aug 1, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 14, 2021
Affected individuals: 30,502state + nationwide
Data types: PIIGovernment ID
Data elements: Social Security number
Attack vector: Unauthorized Access
Threat actor: External

Changes made: Offered 12 months of credit monitoring and identity theft recovery services through ID Experts Corp.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 weeks(177 days from discovery to filing)
Compliance flags: ME AG >90d · 177dME resident >60d · 166d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Aug 1, 2020
→ Filed with AG: Jan 25, 2021
177d 90 days ME AG >90d
Maine
Discovered: Aug 1, 2020
→ Notified: Jan 14, 2021
166d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Aug 1, 2020 → Filed with AG: Jan 25, 2021	177d	90 days	ME AG >90d
Maine	Discovered: Aug 1, 2020 → Notified: Jan 14, 2021	166d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Indiana State AGJan 14 · first

Montana State AGJan 14 · first

California State AG+11d

Washington State AG+11d

Idaho State AG+11d

Oregon State AG+11d

Maine State AG+11d · this page

Massachusetts State AG+13d

New Hampshire State AG+18d

Pattern: first filing Jan 14 (IN), last Feb 1 (NH) — a 18-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/988a6b26-bf8d-42b4-8474-0ef0c2a634c4.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 25, 2021
Raw hash: 56d66f406647c4be7ae2bf786dd03d50b3f122a148764e107e13ed24f29fa91f

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityAmerican Frame Corporation

Victim entityAmerican Frame Corporation

Incidentdiscovered Aug 1, 2020

Stated responseOffered 12 months of credit monitoring and identity theft recovery services through ID Experts Corp.

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov