HackingTechnologyManufacturingInformationCustomer Data InvolvedPIIMediumContained

Fluke Corporation

bd_6cf3241fdf1a3202 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 29, 2025

Filed

May 14, 2026

To disclose

32 weeks

Affected · nationwide

18,51713 in this filing

Linked

3 records

Confidence

66%

Full breach record for Fluke Corporation →2 incidents on file

Fluke Corporation reported an external system breach (hacking) affecting 18,517 individuals, including 13 Maine residents. The unauthorized access occurred between August 10, 2025, and October 7, 2025, and was discovered on September 29, 2025. The company notified affected individuals on May 15, 2026, and offered 24 months of credit monitoring and identity theft prevention services through Epiq.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d32 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 50 days

discovery → filing · 32 weeks / 227 days

Aug 10, 2025

Begins

Sep 29, 2025

Discovered

May 14, 2026

Filed

vs. sector median

+22 wks slower

This filing is one of 3 records about the same incident.View merged incident

A leak claim by cl0p about this victim was first seen 182 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecl0pbd_cd2dc5853f706bb72025-11-13 · +181dVerified by operator

Regulatory filings (1) · sorted by filing gap

California State AGbd_eaa101db5a9c19fb2026-05-15 · +1dVerified by operator

Name: Fluke Corporation
norm: fluke
Domain: fluke.com

Name: Fluke Corporation
norm: fluke
Domain: fluke.com
Industry: TechnologyllmManufacturingllm

Discovered: Sep 29, 2025
Breach occurred: Aug 10, 2025 – Oct 7, 2025
Undetected for: 50 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 15, 2026
Affected individuals: 18,517state + nationwide
Data types: PII
Attack vector: Unauthorized Access
Threat actor: External

During the incident: Offered 24 months of credit monitoring and identity theft prevention and mitigation services through Epiq
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 32 weeks(227 days from discovery to filing)
Compliance flags: Leak >180dME AG >30d · 227dME resident >60d · 228d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Sep 29, 2025
→ Filed with AG: May 14, 2026
227d 30 days (soft) ME AG >30d
Maine
Discovered: Sep 29, 2025
→ Notified: May 15, 2026
228d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Sep 29, 2025 → Filed with AG: May 14, 2026	227d	30 days (soft)	ME AG >30d
Maine	Discovered: Sep 29, 2025 → Notified: May 15, 2026	228d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Maine State AGMay 14 · first · this page

California State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/55595544-01d4-419d-a5df-f20a55b091e7.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 14, 2026
Raw hash: 54d9d6f819d2b8861bf5ce65c4490c59170c1079f83676d3af2e1a4ec14de55b

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entityFluke Corporation

Victim entityFluke Corporation

Incidentdiscovered Sep 29, 2025

Stated responseOffered 24 months of credit monitoring and identity theft prevention and mitigation services through Epiq

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov