HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Extant Aerospace
bd_697e3393d16e22ae · schema v1 · pii pii-v1
Full breach record for Extant Aerospace →Extant Aerospace, a commercial entity based in Melbourne, FL, reported an external system breach (hacking) occurring on August 23, 2025, discovered on April 13, 2026. The incident affected 3,012 individuals, including 5 Maine residents. The breach involved the acquisition of personal identifiers, including government IDs. Extant Aerospace notified affected individuals in writing on May 13, 2026, and provided 24 months of credit monitoring and identity theft protection services through Epiq.
Maine clockDiscovered Apr 13, 2026 → Filed with AG May 13, 202630d ✓ ME AG ≤30d4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_c54f0040387f9acaNew Hampshire State AGfiled 2026-06-04(22d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/442f9192-d1a8-433e-b123-cea004f464a9.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 13, 2026
- Raw hash
- 17513a61d38d04b32a61968abe3d4df7cab9fdf3042e8371ce66edfb03ae0aea
Reporting entity
- Name
- Extant Aerospacenorm: extant aerospace
- Domain
- extantaerospace.com
Victim entity
- Name
- Extant Aerospacenorm: extant aerospace
- Domain
- extantaerospace.com
Incident
- Discovered
- Apr 13, 2026
- Materiality determined
- —
- Notification sent
- May 13, 2026
- Affected individuals
- 3,012
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 13, 2026→ Filed with AG: May 13, 202630d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.