HackingStolen CredentialsCapture App DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumContained
The Delta Companies
bd_95ef1a2821136788 · schema v1 · pii pii-v1
Full breach record for The Delta Companies →The Delta Companies (Dallas, TX) notified the Maine AG that an unknown actor gained unauthorized access to its email system between September 6 and October 10, 2024. The intrusion was detected on or around October 2, 2024. A review of affected files concluded December 2, 2024. Potentially impacted data includes names, dates of birth, and driver's license or state ID numbers. One Maine resident was affected out of 13 total. Experian IdentityWorks (12 months) was offered to affected individuals.
Maine clockDiscovered Oct 2, 2024 → Filed with AG Dec 27, 202486d ⏱ ME AG >30d12 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f522b4e0-690e-4e94-a24c-eeb3490bc22a.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 27, 2024
- Raw hash
- c51a5909710c7a5c4f3f712ec5ec5a1cdfadc28a1a9b70c7e291ca0b005f730d
Reporting entity
- Name
- The Delta Companiesnorm: the delta companies
- Domain
- thedeltacompanies.com
- Industry
- Other Commercial
Victim entity
- Name
- The Delta Companiesnorm: the delta companies
- Domain
- thedeltacompanies.com
- Industry
- Other Commercial
Incident
- Discovered
- Oct 2, 2024
- Materiality determined
- Dec 2, 2024
- Notification sent
- Dec 27, 2024
- Affected individuals
- 1
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
Compliance
- Time to disclose
- 12 weeks(86 days from discovery to filing)
- Compliance flags
- ME AG >30d · 86dME resident >60d · 86d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 2, 2024→ Filed with AG: Dec 27, 202486d 30 days (soft) ME AG >30d Maine Discovered: Oct 2, 2024→ Notified: Dec 27, 202486d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.