DisclosureLens
HackingProfessional ServicesProfessional ServicesData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Financial accountLowActive

SIRVA, INC.

bd_972bbb91d7924235 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 12, 2024

Filed

Feb 4, 2025

To disclose

30 weeks

Affected · nationwide

411 in this filing

Confidence

66%
Full breach record for SIRVA, INC. →8 incidents on file

Sirva, Inc. filed a supplemental notice with the Maine AG regarding an external system breach (hacking) occurring between August 16, 2023, and October 17, 2023. The incident was discovered on July 12, 2024. The breach affected 41 individuals total, including 1 Maine resident. Personal information and financial account data were copied. Sirva notified law enforcement, offered 12 months of Kroll credit monitoring, and is reviewing security policies.

Maine clockDiscovered Jul 12, 2024 → Filed with AG Feb 4, 2025207d ✗ ME AG >90d30 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 331 days
discovery → filing · 30 weeks / 207 days

Aug 16, 2023

Begins

Jul 12, 2024

Discovered

Feb 4, 2025

Filed

vs. sector median

+12 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed41 affectedView incident
A leak claim by lockbit_3 about this victim predates this filing by 488 days.View originating leak claim

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.