DisclosureLens
HackingManufacturingCustomer Data InvolvedFinancial accountFinancial credentialsIdentity (basic)LowResolved

United McGill Corporation

bd_70589aa99036da26 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 16, 2022

Filed

Apr 19, 2022

To disclose

9 weeks

Affected · nationwide

5251 in this filing

Linked

4 filings

Confidence

50%
Full breach record for United McGill Corporation →

United McGill Corporation reported an external system breach that occurred and was discovered on February 16, 2022. The breach affected 525 individuals, including one Maine resident. The compromised data included names combined with financial account numbers or credit/debit card numbers along with their security codes or PINs. Affected residents were notified on April 14, 2022, and were offered 12 months of credit monitoring and identity protection services.

Maine clockDiscovered Feb 16, 2022 → Filed with AG Apr 19, 202262d ⏱ ME AG >30d9 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 9 weeks / 62 days

Feb 16, 2022

Begins

Feb 16, 2022

Discovered

Apr 19, 2022

Filed

This filing is one of 4 about the same incident.View merged incident
A leak claim by conti about this victim predates this filing by 46 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
Indiana State AGApr 14 · first
Massachusetts State AG+5d
Maine State AG+5d · this page

Pattern: first filing Apr 14 (IN), last Apr 19 (ME) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.