HackingCustomer Data InvolvedPIILowResolved
ANDY FRAIN SERVICES, INC.
bd_7e9856f775bef5ba · schema v1 · pii pii-v1
Full breach record for ANDY FRAIN SERVICES, INC. →Andy Frain Services, Inc. (Aurora, IL) reported an external system breach (hacking) that occurred and was discovered on October 23, 2024. A total of 100,964 individuals were affected nationally, including 79 Maine residents. Affected individuals were notified by written notice on May 5, 2025. Identity theft protection services (12-month CyEx credit monitoring and identity restoration) were offered to those affected.
Maine clockDiscovered Oct 23, 2024 → Filed with AG May 9, 2025198d ✗ ME AG >90d28 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_b239efc3babe00afNew Hampshire State AGfiled 2025-05-12(3d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a767f210-0989-43f8-9ceb-8bc018ce2b8c.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 9, 2025
- Raw hash
- 95b3f303f4c9f891342f86ba7cbaf2a2c49bc02e64ed09af8f656298d5d0d279
Reporting entity
- Name
- ANDY FRAIN SERVICES, INC.norm: andy frain
- Domain
- andyfrain.com
- Industry
- Other Commercial
Victim entity
- Name
- ANDY FRAIN SERVICES, INC.norm: andy frain
- Domain
- andyfrain.com
- Industry
- Other Commercial
Incident
- Discovered
- Oct 23, 2024
- Materiality determined
- —
- Notification sent
- May 5, 2025
- Affected individuals
- 79
- Data types
- PII
- Attack vector
- Unauthorized Access
- Threat actor
- External
- Regulator citations
- Reported to Maine Attorney General
Compliance
- Time to disclose
- 28 weeks(198 days from discovery to filing)
- Compliance flags
- ME AG >90d · 198dME resident >180d · 194d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 23, 2024→ Filed with AG: May 9, 2025198d 90 days ME AG >90d Maine Discovered: Oct 23, 2024→ Notified: May 5, 2025194d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.