DisclosureLens
HackingRetailGovernment IDHighResolved

CARL BUDDIG AND COMPANY

bd_96e5e27b0f960cf4 · schema v1 · pii pii-v1

Severity

High

Discovered

Jan 26, 2024

Filed

Apr 17, 2024

To disclose

12 weeks

Affected · nationwide

11,8301 in this filing

Linked

4 filings

Confidence

50%
Full breach record for CARL BUDDIG AND COMPANY →2 incidents on file

Carl Buddig and Company reported a data breach affecting one Maine resident. The breach, an external system hack, occurred on April 10, 2023, and was discovered on January 26, 2024. The compromised information includes names combined with driver's license or state ID numbers. Affected individuals were notified on April 17, 2024, and offered 12 months of credit monitoring services through Experian.

Maine clockDiscovered Jan 26, 2024 → Filed with AG Apr 17, 202482d ⏱ ME AG >30d12 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 291 days
discovery → filing · 12 weeks / 82 days

Apr 10, 2023

Begins

Jan 26, 2024

Discovered

Apr 17, 2024

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Filing propagation · 4 filings · 4 states

View merged incident ↗
New Hampshire State AGApr 17 · first
Massachusetts State AGApr 17 · first
Indiana State AGApr 17 · first
Maine State AGApr 17 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.