HackingProfessional ServicesProfessional ServicesStolen CredentialsData ExfiltratedData PublishedTargetedCustomer Data InvolvedIdentity (basic)Government IDHighContained

HARNISH GROUP INC.

bd_92841ba5998dd763 · schema v1 · pii pii-v1

Severity

High

Discovered

Nov 11, 2025

Filed

Dec 31, 2025

To disclose

7 weeks

Affected · nationwide

2,8881 in this filing

Linked

4 filings

Confidence

66%

Full breach record for HARNISH GROUP INC. →

Harnish Group Inc. reported an external system breach (hacking) on November 7, 2025, discovered November 11, 2025. The incident resulted in the unauthorized disclosure of employee names and Social Security Numbers. The responsible party publicly posted files on December 9, 2025. 2,888 individuals were affected, including 1 Maine resident. Notification was sent on December 22, 2025, offering 2 years of Norton LifeLock monitoring.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Nov 11, 2025 → Filed with AG Dec 31, 202550d ⏱ ME AG >30d7 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 4 days

discovery → filing · 7 weeks / 50 days

Nov 7, 2025

Begins

Nov 11, 2025

Discovered

Dec 31, 2025

Filed

vs. sector median

12 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Montana State AGbd_33f0b6908af9263a2025-12-31Verified
Washington State AGbd_da95636ccea25b752025-12-29 · +2dCandidate
Indiana State AGbd_bf3d428b82f784ad2025-12-22 · +9dVerified

Name: HARNISH GROUP INC.
norm: harnish group
Domain: harnishgrp.com

Name: HARNISH GROUP INC.
norm: harnish group
Domain: harnishgrp.com
Industry: Professional Servicesllm

Discovered: Nov 11, 2025
Breach occurred: Nov 7, 2025
Undetected for: 4 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 22, 2025
Affected individuals: 2,888state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Filed notification with Maine Attorney General
Initial access: valid_credentials

During the incident: Hired experts to conduct an in-depth forensic investigation
Completed all changes to our network to prevent this attack from reoccurring
Partnered with Norton LifeLock to provide 2-year subscription for identity theft monitoring services
Changes made: Completed all changes to our network to prevent this attack from reoccurring
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(50 days from discovery to filing)
Compliance flags: ME AG >30d · 50d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Nov 11, 2025
→ Filed with AG: Dec 31, 2025
50d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Nov 11, 2025 → Filed with AG: Dec 31, 2025	50d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGDec 22 · first

Washington State AG+7d

Montana State AG+9d

Maine State AG+9d · this page

Pattern: first filing Dec 22 (IN), last Dec 31 (ME) — a 9-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d08fd653-de42-42f4-abf3-86bb31e16776.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 31, 2025
Raw hash: 6b453f7db611ba45f90c98e74c3691cf8cf78b4538229d56c8611d3f967355e3

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityHARNISH GROUP INC.

Victim entityHARNISH GROUP INC.

Incidentdiscovered Nov 11, 2025

Stated responseHired experts to conduct an in-depth forensic investigation

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov