MalwareRansomwareData EncryptedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHighContained
Sudler Property Management
bd_71223f8f700841b7 · schema v1 · pii pii-v1
Full breach record for Sudler Property Management →Sudler Property Management experienced a ransomware incident on October 30, 2021, discovered on October 31, 2021. The breach affected 8,860 individuals, including 4 Maine residents. The attacker encrypted data and accessed financial account numbers and credit/debit card details. The company notified affected individuals in writing on March 11, 2022, and provided 12 months of credit monitoring through Experian.
Maine clockDiscovered Oct 31, 2021 → Filed with AG Mar 11, 2022131d ✗ ME AG >90d19 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_abedc03a028ab0a9Montana State AGfiled 2022-03-11Candidate
- bd_e9601eea38f111baNew Hampshire State AGfiled 2022-03-18(7d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/bfbfa70c-927d-4bfe-a39a-983a69a8fc4f.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 11, 2022
- Raw hash
- 9b1802f33b88432665ae0e7db23fdbd24abd03324e3f0fdf015e6d2046f93500
Reporting entity
- Name
- Sudler Property Managementnorm: sudler property management
Victim entity
- Name
- Sudler Property Managementnorm: sudler property management
Incident
- Discovered
- Oct 31, 2021
- Materiality determined
- —
- Notification sent
- Mar 11, 2022
- Affected individuals
- 8,860
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 19 weeks(131 days from discovery to filing)
- Compliance flags
- ME AG >90d · 131dME resident >60d · 131d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 31, 2021→ Filed with AG: Mar 11, 2022131d 90 days ME AG >90d Maine Discovered: Oct 31, 2021→ Notified: Mar 11, 2022131d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.