HackingCustomer Data InvolvedDelayed DiscoveryPIILowResolved
PMA Consultants
bd_7b8da585f4ff4455 · schema v1 · pii pii-v1
Full breach record for PMA Consultants →PMA Consultants (Ann Arbor, MI) reported an external system breach (hacking) that occurred May 4–7, 2024 but was not discovered until February 4, 2025. A total of 1,801 individuals were affected, including 12 Maine residents. A previous breach notification was filed on 01/28/2025. Affected individuals were notified by written notice on 03/17/2025 and offered 12 months of complimentary credit monitoring and identity theft protection through Cyberscout, a TransUnion company.
Maine clockDiscovered Feb 4, 2025 → Filed with AG Mar 17, 202541d ⏱ ME AG >30d6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_7d2860b96ee0522aNew Hampshire State AGfiled 2025-03-17Verified
- bd_93723ad4fd281834Indiana State AGfiled 2025-03-17Verified
- bd_fd0865727c08d584Maryland State AGfiled 2025-03-17Verified
- bd_e55973011bb404beMaine State AGfiled 2025-01-30(46d gap)Candidate
Show 1 more filing ↓Show fewer ↑up to 46d gap
- bd_fee1b469d6f3bacdNew Hampshire State AGfiled 2025-01-30(46d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c5b2b981-c821-4ef9-b86b-96641c7b5825.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 17, 2025
- Raw hash
- 40ac29b4fb3a0368893844d4a25bb8048669dddd9b0057eaaafa4da8ae618d4d
Reporting entity
- Name
- PMA Consultantsnorm: pma consultants
- Industry
- Other Commercial
Victim entity
- Name
- PMA Consultantsnorm: pma consultants
- Industry
- Other Commercial
Incident
- Discovered
- Feb 4, 2025
- Materiality determined
- —
- Notification sent
- Mar 17, 2025
- Affected individuals
- 12
- Data types
- PII
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 6 weeks(41 days from discovery to filing)
- Compliance flags
- ME AG >30d · 41d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 4, 2025→ Filed with AG: Mar 17, 202541d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.