HackingHospitalityCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
UniFirst Corporation
bd_92a843a8aee70387 · schema v1 · pii pii-v1
Full breach record for UniFirst Corporation →UniFirst Corporation experienced an external system breach on September 28, 2020, discovered the following day. The incident compromised the names and Social Security numbers of 170 individuals, including two Maine residents. Affected individuals were notified on October 13, 2020, and offered 24 months of identity protection services.
Maine clockDiscovered Sep 29, 2020 → Filed with AG Nov 24, 202056d ⏱ ME AG >30d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/2bce6536-575c-4cd6-aa8a-f73dafc0e2e2.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 24, 2020
- Raw hash
- 0762ff812946031d619d5bb473f1043004c6343d53d749a4c579cc3d277ba1ea
Reporting entity
- Name
- UniFirst Corporationnorm: unifirst
Victim entity
- Name
- UniFirst Corporationnorm: unifirst
Incident
- Discovered
- Sep 29, 2020
- Materiality determined
- —
- Notification sent
- Oct 13, 2020
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 8 weeks(56 days from discovery to filing)
- Compliance flags
- ME AG >30d · 56d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 29, 2020→ Filed with AG: Nov 24, 202056d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.