HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Kimco Staffing Services Inc
bd_8db7a4c2493ba751 · schema v1 · pii pii-v1
Full breach record for Kimco Staffing Services Inc →Kimco Staffing Services Inc. reported an external system breach (hacking) occurring on June 24, 2023, discovered on November 28, 2023. The incident compromised names and Social Security Numbers of 69,687 individuals, including 1 Maine resident. Kimco notified affected individuals in writing on December 19, 2023, and provided 12 months of credit monitoring and identity restoration services through Kroll.
Leak gap clock⏱ Leak >90d21 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 2 about the same incident.View merged incident
A leak claim by alphv about this victim predates this filing by 140 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_25e83c5caf9ca95cLeak Sitealphvfiled 2023-08-01(140d gap)Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c4f1f009-9d69-4f48-866a-c34d1f11aa8f.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 19, 2023
- Raw hash
- 6bd59c38687dea4dd072180f133d07da2de1d419f44d43ec47d588832882176e
Reporting entity
- Name
- Kimco Staffing Services Incnorm: kimco staffing
- Domain
- kimco.com
Victim entity
- Name
- Kimco Staffing Services Incnorm: kimco staffing
- Domain
- kimco.com
Incident
- Discovered
- Nov 28, 2023
- Materiality determined
- —
- Notification sent
- Dec 19, 2023
- Affected individuals
- 69,687
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 21 days(21 days from discovery to filing)
- Compliance flags
- Leak >90dME AG ≤30d · 21d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 28, 2023→ Filed with AG: Dec 19, 202321d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.