HackingRetail & ConsumerRetailLow
D'Ambrosio Dodge Inc.
bd_95b2a941f1901236 · schema v1 · pii pii-v1
Full breach record for D'Ambrosio Dodge Inc. →D'Ambrosio Dodge Inc., an automotive dealership based in Downingtown, PA, reported an external system breach (hacking) to the Maine Attorney General. The incident occurred and was discovered on November 24, 2025, affecting 2 individuals total, including 2 Maine residents. Written notification was sent on May 5, 2026, and IDX identity theft protection services were offered. The specific data types compromised were not enumerated in the filing. Notification submitted by outside counsel Richard Halm of Clark Hill PLC.
Maine clockDiscovered Nov 24, 2025 → Filed with AG May 5, 2026162d ✗ ME AG >90d23 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_b3d7cbc18e9dde3eVermont State AGfiled 2026-05-05Verified
- bd_b986c4ea6bd8dd0fIndiana State AGfiled 2026-05-05Verified
- bd_e6342f6be1bf34a0New Hampshire State AGfiled 2026-05-11(6d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/db1cb413-5b6f-4e14-8b29-df5f214ee59c.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 5, 2026
- Raw hash
- 9cd40a056da833ccccc925bfcf0af11a62f6870100c1070e476e420a6a0be3b1
Reporting entity
- Name
- CLARK HILL PLCnorm: clark hill
Victim entity
- Name
- D'Ambrosio Dodge Inc.norm: d ambrosio dodge
- Industry
- Automotive Dealership
- Industry
- Retail & Consumerllm
Incident
- Discovered
- Nov 24, 2025
- Materiality determined
- —
- Notification sent
- May 5, 2026
- Affected individuals
- 2
- Data types
- —
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 23 weeks(162 days from discovery to filing)
- Compliance flags
- ME AG >90d · 162dME resident >60d · 162d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 24, 2025→ Filed with AG: May 5, 2026162d 90 days ME AG >90d Maine Discovered: Nov 24, 2025→ Notified: May 5, 2026162d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.