HackingCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained
Untapped LLC
bd_9845c04fed52d466 · schema v1 · pii pii-v1
Full breach record for Untapped LLC →UnTapped LLC reported a data breach to the Maine Attorney General, indicating that an external system breach (hacking) occurred on April 12, 2023. The breach resulted in the compromise of names combined with financial account numbers or credit/debit card numbers, including security codes or PINs. The incident affected 487 individuals in total, with 9 of them being Maine residents. Affected individuals were notified on July 21, 2023, and were offered 12 months of credit monitoring services through Cyberscout.
Maine clockDiscovered Apr 12, 2023 → Filed with AG Jul 20, 202399d ✗ ME AG >90d14 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_4b2f5aa0e56fe174Montana State AGfiled 2023-07-20Candidate
- bd_66efab087112e904Vermont State AGfiled 2023-07-20Verified
- bd_2335e347aff98eddNew Hampshire State AGfiled 2023-07-21(1d gap)Verified
- bd_f9023cb1396084b0Maine State AGfiled 2023-07-21(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/8fd3e068-3e39-4cbb-a40d-2189354fa9c7.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 20, 2023
- Raw hash
- b1cc55c60cadfb76ecaebc0be9bdfe5ac578adfe144de0df84bd5a650d61ba57
Reporting entity
- Name
- Untapped LLCnorm: untapped
- Domain
- untappedllc.com
Victim entity
- Name
- Untapped LLCnorm: untapped
- Domain
- untappedllc.com
Incident
- Discovered
- Apr 12, 2023
- Materiality determined
- —
- Notification sent
- Jul 21, 2023
- Affected individuals
- 9
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 14 weeks(99 days from discovery to filing)
- Compliance flags
- ME AG >90d · 99dME resident >60d · 100d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 12, 2023→ Filed with AG: Jul 20, 202399d 90 days ME AG >90d Maine Discovered: Apr 12, 2023→ Notified: Jul 21, 2023100d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.