HackingPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Retail Therapy LLC
bd_6a5473e21eff0eff · schema v1 · pii pii-v1
Full breach record for Retail Therapy LLC →Retail Therapy LLC experienced an external system breach (hacking) between November 20 and December 11, 2025, discovered March 19, 2026. An unauthorized third party gained access to systems containing personal information including names, dates of birth, Social Security numbers, driver's license numbers, government-issued IDs, and passport numbers. Two Maine residents were notified on April 14, 2026. Federal law enforcement was notified; 12-month credit monitoring through TransUnion was offered.
Maine clockDiscovered Mar 19, 2026 → Filed with AG Apr 14, 202626d ✓ ME AG ≤30d26 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_27e75c8dbe1e643cNew Hampshire State AGfiled 2026-04-14Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/46406160-48ee-467c-9751-aaabcea6615a.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 14, 2026
- Raw hash
- b4fe94b7b42ea2577b4232f482642d32d56081d03bfa949bc0f501ca890d293c
Reporting entity
- Name
- Retail Therapy LLCnorm: retail therapy
- Domain
- frugalfannies.com
- Industry
- Other Commercial
Victim entity
- Name
- Retail Therapy LLCnorm: retail therapy
- Domain
- frugalfannies.com
- Industry
- Other Commercial
Incident
- Discovered
- Mar 19, 2026
- Materiality determined
- —
- Notification sent
- Apr 14, 2026
- Affected individuals
- 2
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
- Regulator citations
- Notified Maine Attorney GeneralNotified federal law enforcementNotified three major credit reporting agencies
Compliance
- Time to disclose
- 26 days(26 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 26d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 19, 2026→ Filed with AG: Apr 14, 202626d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.