Social EngineeringPhishingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Burrelles Information Services
bd_8429db0cdfe183fd · schema v1 · pii pii-v1
Full breach record for Burrelles Information Services →Burrelles Information Services LLC (DBA Burrelles) reported a phishing incident on March 6, 2022, discovered on March 29, 2022. The breach affected 658 individuals, including 229 Maine residents. Personal information compromised included names and Social Security Numbers. The company provided written notification and offered 12 months of credit monitoring through Experian.
Maine clockDiscovered Mar 29, 2022 → Filed with AG May 17, 202249d ⏱ ME AG >30d7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_86bfa5f67f4d6bb9New Hampshire State AGfiled 2022-05-18(1d gap)Verified
- bd_5aa83b4f77bfd0faMaine State AGfiled 2022-05-13(4d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/16f2c67b-145d-401f-8879-ac2ac9ef3b6c.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 17, 2022
- Raw hash
- f33ba6c805b9b3e1ed8615d694d1c7906b01cc42525e3b82202eb2a2e5941661
Reporting entity
- Name
- MCDONALD HOPKINS LLCnorm: mcdonald hopkins
Victim entity
- Name
- Burrelles Information Servicesnorm: burrelles information
Incident
- Discovered
- Mar 29, 2022
- Materiality determined
- —
- Notification sent
- Apr 29, 2022
- Affected individuals
- 658
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- phishing_link
Compliance
- Time to disclose
- 7 weeks(49 days from discovery to filing)
- Compliance flags
- ME AG >30d · 49d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 29, 2022→ Filed with AG: May 17, 202249d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.