HackingTransportation & LogisticsProfessional ServicesTransportationCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryDownstream VictimsPIIFINANCIALLowContained
Sirva, Inc. filing on its own and on behalf of the impacted data owners (Sirva, Inc. clients)
bd_972bbb91d7924235 · schema v1 · pii pii-v1
Full breach record for Sirva, Inc. filing on its own and on behalf of the impacted data owners (Sirva, Inc. clients) →Sirva, Inc., a provider of moving and relocation services, experienced an external system breach between August 16, 2023 and October 17, 2023, in which unknown actors accessed certain Sirva systems and copied files. The breach was discovered on July 12, 2024. Affected data included names and financial account information. One Maine resident was notified on February 3, 2025. Sirva offered 12 months of Kroll identity monitoring services to affected individuals.
Maine clockDiscovered Jul 12, 2024 → Filed with AG Feb 4, 2025207d ✗ ME AG >90d30 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
A leak claim by lockbit_3 about this victim predates this filing by 488 days.View originating leak claim
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/81aba737-b5ba-45ad-8fa2-0cd7994ea9b6.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 4, 2025
- Raw hash
- cc220fd4b8f10fc37b46c2d4c5eab1c1765fde690dcd71e2919080f80376d70b
Reporting entity
- Name
- Sirva, Inc. filing on its own and on behalf of the impacted data owners (Sirva, Inc. clients)norm: sirva inc filing on its own and on behalf of the impacted data owners sirva inc clients
- Domain
- sirva.com
- Industry
- Moving and Relocation Services
Victim entity
- Name
- Sirva, Inc. filing on its own and on behalf of the impacted data owners (Sirva, Inc. clients)norm: sirva inc filing on its own and on behalf of the impacted data owners sirva inc clients
- Domain
- sirva.com
- Industry
- Moving and Relocation Services
- Industry
- Transportation & LogisticsllmProfessional Servicesllm
Incident
- Discovered
- Jul 12, 2024
- Materiality determined
- —
- Notification sent
- Feb 3, 2025
- Affected individuals
- 1
- Data types
- PIIFINANCIAL
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 ChannelT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified federal law enforcement and regulators, as applicable
Compliance
- Time to disclose
- 30 weeks(207 days from discovery to filing)
- Compliance flags
- ME AG >90d · 207dME resident >180d · 206dLeak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 12, 2024→ Filed with AG: Feb 4, 2025207d 90 days ME AG >90d Maine Discovered: Jul 12, 2024→ Notified: Feb 3, 2025206d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.