HackingTechnologyInformationStolen CredentialsTargetedCustomer Data InvolvedIdentity (basic)PIILowContained

DecisivEdge, LLC

bd_75d3ef673b103756 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 31, 2024

Filed

Nov 26, 2024

To disclose

26 days

Affected

1state residents only

Confidence

66%

Full breach record for DecisivEdge, LLC →

DecisivEdge, LLC reported an unauthorized access to a single employee email account occurring between July 15 and October 31, 2024. The breach was discovered on October 31, 2024, following a forensic investigation. One Maine resident was affected. The attacker accessed personal information within the compromised account. DecisivEdge engaged external cybersecurity professionals for investigation and notified the affected individual on November 26, 2024.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Oct 31, 2024 → Filed with AG Nov 26, 202426d ✓ ME AG ≤30d26 days discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 108 days

discovery → filing · 26 days

Jul 15, 2024

Begins

Oct 31, 2024

Discovered

Nov 26, 2024

Filed

vs. sector median

15 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: DecisivEdge, LLC
norm: decisivedge

Name: DecisivEdge, LLC
norm: decisivedge
Industry: Technologyllm

Discovered: Oct 31, 2024
Breach occurred: Jul 15, 2024 – Oct 31, 2024
Undetected for: 108 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 26, 2024
Affected individuals: 1state-resident count only
Data types: Identity (basic)PII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Filed notification with Maine Attorney General
Initial access: valid_credentials

During the incident: Commenced a prompt and thorough investigation with external cybersecurity professionals
Conducted an extensive forensic investigation and manual document review
Changes made: Continually evaluate and modify practices and internal controls to enhance the security and privacy of your personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 days(26 days from discovery to filing)
Compliance flags: ME AG ≤30d · 26d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Oct 31, 2024
→ Filed with AG: Nov 26, 2024
26d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Oct 31, 2024 → Filed with AG: Nov 26, 2024	26d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/39f148e6-beae-4310-ac19-4dfcfbfc6bbe.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 26, 2024
Raw hash: 9902ec0e425e94e2ff36c5b1f0bde3d8985559e998ddfb5f8556cbf8ef98b5cd

Reporting entityDecisivEdge, LLC

Victim entityDecisivEdge, LLC

Incidentdiscovered Oct 31, 2024

Stated responseCommenced a prompt and thorough investigation with external cybersecurity professionals

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov