HackingVulnerability ExploitSupply Chain (3P Vendor)Customer Data InvolvedFINANCIAL_ACCOUNTLowContained
IMI Precision Engineering
bd_6ba9384815703f63 · schema v1 · pii pii-v1
Full breach record for IMI Precision Engineering →A vulnerability in a third-party hosting provider's server for Bimba.com led to a data breach affecting customers of IMI Precision Engineering d/b/a Bimba Manufacturing. The breach, occurring from August 21, 2020, to November 13, 2020, and discovered on November 20, 2020, compromised names and financial account or credit/debit card numbers with their security codes. The company notified affected individuals on December 23, 2020, and offered two years of complimentary identity theft and credit protection services through Experian.
Maine clockDiscovered Nov 20, 2020 → Filed with AG Dec 22, 202032d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ad8f9a73-75f3-415c-8e0c-0141f21bea60.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 22, 2020
- Raw hash
- 4af5b05f0f0766cdd7b493967cd18a6729f8be25c64cef3fa27d5d38981f3422
Reporting entity
- Name
- IMI Precision Engineeringnorm: imi precision engineering
Victim entity
- Name
- IMI Precision Engineeringnorm: imi precision engineering
Incident
- Discovered
- Nov 20, 2020
- Materiality determined
- —
- Notification sent
- Dec 23, 2020
- Affected individuals
- 1
- Data types
- FINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
Compliance
- Time to disclose
- 5 weeks(32 days from discovery to filing)
- Compliance flags
- ME AG >30d · 32d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 20, 2020→ Filed with AG: Dec 22, 202032d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.