HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
Kelly
bd_88434ae32ff899f1 · schema v1 · pii pii-v1
Full breach record for Kelly →Kelly, Remmel & Zimmerman, a professional services firm in Portland, Maine, reported an external system breach (hacking) occurring on March 16, 2022, discovered on May 6, 2022. The incident affected 13 individuals (12 Maine residents). Acquired data included names and financial account or credit/debit card numbers (with security codes/PINs). The firm notified affected individuals in writing on June 8, 2022, and provided 24 months of credit monitoring and identity restoration through Experian.
Maine clockDiscovered May 6, 2022 → Filed with AG Jun 8, 202233d ⏱ ME AG >30d5 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed13 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/5966d578-d5b8-44e3-b4f3-d17f21415055.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 8, 2022
- Raw hash
- e08ddf6d0d2f7c3357246bd6e9dd697f88d2e3a108a2c3110caf1c1e4ef73de7
Reporting entity
- Name
- Kellynorm: kelly
- Domain
- kellyshomemadeicecream.com
Victim entity
- Name
- Kellynorm: kelly
- Domain
- kellyshomemadeicecream.com
Incident
- Discovered
- May 6, 2022
- Materiality determined
- —
- Notification sent
- Jun 8, 2022
- Affected individuals
- 13
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 5 weeks(33 days from discovery to filing)
- Compliance flags
- ME AG >30d · 33d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 6, 2022→ Filed with AG: Jun 8, 202233d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.