HackingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIILowContained
Shingle & Gibb Automation
bd_8bbf578655cc6f31 · schema v1 · pii pii-v1
Full breach record for Shingle & Gibb Automation →On 2025-11-12, Shingle & Gibb Automation detected unauthorized third-party access to its network. Files potentially containing personal information (names plus additional data elements) may have been acquired. Breach discovered 2026-02-20. 529 total individuals affected; 4 Maine residents. Complimentary one-year Experian IdentityWorks Credit 3B offered to affected individuals.
Maine clockDiscovered Feb 20, 2026 → Filed with AG Mar 31, 202639d ⏱ ME AG >30d6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
A leak claim by akira about this victim predates this filing by 139 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_d1e985f9e9ddf8e0Leak Siteakirafiled 2026-04-09(9d gap)Verified
- bd_04894491f01cae92Leak Siteakirafiled 2025-11-12(139d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/3a8fcd04-943e-48d8-bfaa-3f64f737d68d.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 31, 2026
- Raw hash
- e6222a5b181e5aa73c0b570d6fa90a3a6faa4dfee7cfc24d228560aff8777af1
Reporting entity
- Name
- Shingle & Gibb Automationnorm: shingle gibb automation
- Domain
- shingle.com
- Industry
- Other Commercial
Victim entity
- Name
- Shingle & Gibb Automationnorm: shingle gibb automation
- Domain
- shingle.com
- Industry
- Other Commercial
Incident
- Discovered
- Feb 20, 2026
- Materiality determined
- Feb 20, 2026
- Notification sent
- Mar 25, 2026
- Affected individuals
- 4
- Data types
- PII
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 6 weeks(39 days from discovery to filing)
- Compliance flags
- ME AG >30d · 39dLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 20, 2026→ Filed with AG: Mar 31, 202639d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.