HackingStolen CredentialsCapture App DataCustomer Data InvolvedData ExfiltratedDelayed DiscoveryPIIIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTCREDENTIALSMediumResolved
Goltens Worldwide Management Corp.
bd_8bbc52927a0d12a3 · schema v1 · pii pii-v1
Full breach record for Goltens Worldwide Management Corp. →Goltens Worldwide Management Corp. reported an unauthorized actor accessed an employee's email account between May 26–28, 2025, discovered August 26, 2025. Potentially exposed data includes names, Social Security numbers, passport numbers, driver's licenses, and bank account numbers. Two Maine residents were notified on October 24, 2025. 24 months of credit monitoring via Epiq (Privacy Solutions ID) was offered. No evidence of misuse was identified.
Maine clockDiscovered Aug 26, 2025 → Filed with AG Oct 24, 202559d ⏱ ME AG >30d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/88e3412a-9edd-4434-ae34-92297e99da20.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 24, 2025
- Raw hash
- 18e9c99386cfa789e1a1375c7cc863a45d93f2cb2c17a26fa8f9f5aa222d05de
Reporting entity
- Name
- Goltens Worldwide Management Corp.norm: goltens worldwide management
- Domain
- goltens.com
- Industry
- Other Commercial
Victim entity
- Name
- Goltens Worldwide Management Corp.norm: goltens worldwide management
- Domain
- goltens.com
- Industry
- Other Commercial
Incident
- Discovered
- Aug 26, 2025
- Materiality determined
- —
- Notification sent
- Oct 24, 2025
- Affected individuals
- 2
- Data types
- PIIIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Maine Attorney General notification
Compliance
- Time to disclose
- 8 weeks(59 days from discovery to filing)
- Compliance flags
- ME AG >30d · 59d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 26, 2025→ Filed with AG: Oct 24, 202559d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.