DisclosureLens
PhysicalRetail & ConsumerRetailTheftCustomer Data InvolvedIdentity (basic)Government IDMediumResolved

Central Maine Motors Auto Group

bd_7ef549f98b0da969 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 6, 2022

Filed

Jul 15, 2022

To disclose

27 weeks

Affected · nationwide

586569 in this filing

Confidence

65%
Full breach record for Central Maine Motors Auto Group

Central Maine Motors Auto Group reported a data breach affecting 586 individuals due to the loss or theft of a device. The incident, which occurred and was discovered on January 6, 2022, resulted in the compromise of names and Social Security Numbers. The company notified affected individuals on July 15, 2022, and offered 24 months of credit monitoring and identity restoration services.

Maine clockDiscovered Jan 6, 2022Filed with AG Jul 15, 2022190d ME AG >90d27 weeks discovery → filing
occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 27 weeks / 190 days

Jan 6, 2022

Begins

Jan 6, 2022

Discovered

Jul 15, 2022

Filed

vs. sector median

+19 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed586 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.