HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
SPECTRUM BRANDS, INC.
bd_835069d60ee13a0f · schema v1 · pii pii-v1
Full breach record for SPECTRUM BRANDS, INC. →Spectrum Brands, Inc. reported an external system breach (hacking) occurring on May 30, 2023, discovered on August 11, 2023. The incident affected 3,225 individuals, including 1 Maine resident. Personal information acquired included names and Social Security Numbers. Spectrum Brands provided written notification on November 13, 2023, and offered 24 months of credit monitoring and identity protection services through Experian.
Maine clockDiscovered Aug 11, 2023 → Filed with AG Nov 10, 202391d ✗ ME AG >90d13 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_5df448f141979973Vermont State AGfiled 2023-11-13(3d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/cb7a8464-a664-46eb-acd3-328a07172442.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 10, 2023
- Raw hash
- f4ff6afb2b16d239cc17b0fe58b97abff336b95499e7ec01575ab57f342da8c3
Reporting entity
- Name
- SPECTRUM BRANDS, INC.norm: spectrum brands
Victim entity
- Name
- SPECTRUM BRANDS, INC.norm: spectrum brands
Incident
- Discovered
- Aug 11, 2023
- Materiality determined
- —
- Notification sent
- Nov 13, 2023
- Affected individuals
- 3,225
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 13 weeks(91 days from discovery to filing)
- Compliance flags
- ME AG >90d · 91dME resident >60d · 94d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 11, 2023→ Filed with AG: Nov 10, 202391d 90 days ME AG >90d Maine Discovered: Aug 11, 2023→ Notified: Nov 13, 202394d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.