HackingCustomer Data InvolvedPIILow
CNHI INTERNATIONAL SA
bd_718971afb4c033f0 · schema v1 · pii pii-v1
Full breach record for CNHI INTERNATIONAL SA →CNHI, LLC reported a data breach affecting 57 Maine residents. The breach, described as an external system breach (hacking), occurred between April 27, 2025, and May 17, 2025, and was discovered on November 19, 2025. Affected individuals were notified on December 8, 2025, and offered one year of credit monitoring and identity theft protection services from Experian.
Leak gap clock✗ Leak >180d19 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
A leak claim by play about this victim predates this filing by 205 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_ad867b714137e218Leak Siteplayfiled 2025-05-21(200d gap)Candidate
- bd_21ce41c928249097Leak Siteplayfiled 2025-05-17(205d gap)Verified by operator
Regulatory filings (2) · sorted by filing gap
- bd_9db08d268021d5f2California State AGfiled 2025-12-08Verified
- bd_c7880f8b96afaf8cMontana State AGfiled 2025-12-08Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a0ce4799-a60e-421f-971b-1b8e09103b1b.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 8, 2025
- Raw hash
- f592d262fcaf8077b0e01188af8aecedb386fd550efd73fead2a897eaee77089
Reporting entity
- Name
- CNHI INTERNATIONAL SAnorm: cnhi international
- Domain
- cnhi.com
Victim entity
- Name
- CNHI INTERNATIONAL SAnorm: cnhi international
- Domain
- cnhi.com
Incident
- Discovered
- Nov 19, 2025
- Materiality determined
- —
- Notification sent
- Dec 8, 2025
- Affected individuals
- 57
- Data types
- PII
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 19 days(19 days from discovery to filing)
- Compliance flags
- Leak >180dME AG ≤30d · 19d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 19, 2025→ Filed with AG: Dec 8, 202519d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.