HackingIDENTITY_BASICIDENTITY_GOVERNMENTMediumResolved
cgm
bd_6918515e00e0c309 · schema v1 · pii pii-v1
Full breach record for cgm →CGM, Inc. experienced an external system breach on December 15, 2022, which was discovered on December 18, 2023. The breach affected 2 Maine residents, compromising their names and driver's license or non-driver identification card numbers. The company notified the affected individuals on February 14, 2024, and offered 12 months of complimentary credit monitoring services through Equifax.
Leak gap clock✗ Leak >180d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
A leak claim by lockbit2 about this victim predates this filing by 717 days.View originating leak claim
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b92e2e3b-b581-4595-81be-10fce37e9706.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 14, 2024
- Raw hash
- dbc4700f0da8d0ae83a0d1b1a9ecb4339905c2d64f59c17f7e30f3d6acd0dc58
Reporting entity
- Name
- cgm
Victim entity
- Name
- cgm
Incident
- Discovered
- Dec 18, 2023
- Materiality determined
- —
- Notification sent
- Feb 14, 2024
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 8 weeks(58 days from discovery to filing)
- Compliance flags
- Leak >180dME AG >30d · 58d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 18, 2023→ Filed with AG: Feb 14, 202458d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.