HackingData ExfiltratedDelayed DiscoveryCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained
Metabolic Maintenance Products, Inc.
bd_98f456a397f4a3a3 · schema v1 · pii pii-v1
Full breach record for Metabolic Maintenance Products, Inc. →Metabolic Maintenance Products, Inc. experienced an external system breach that was discovered on September 29, 2020, but occurred on October 1, 2019. The breach affected 27 Maine residents and compromised names and financial account information, including credit/debit card numbers with their security codes.
Maine clockDiscovered Sep 29, 2020 → Filed with AG Dec 23, 202085d ⏱ ME AG >30d12 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_849acf89c07a2dcdCalifornia State AGfiled 2020-12-23Verified
- bd_9029603dd3d67e32Oregon State AGfiled 2020-12-23Verified by operator
- bd_d500def83e5442fcWashington State AGfiled 2020-12-23Verified by operator
- bd_67d414f9d37cc3cdMontana State AGfiled 2020-12-22(1d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f571d10c-c085-4c52-8b12-e930e974858a.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 23, 2020
- Raw hash
- d431520f97ed8754ab949413aa99712748454de6861d7a099a106bc87d816bf1
Reporting entity
- Name
- Metabolic Maintenance Products, Inc.norm: metabolic maintenance products
Victim entity
- Name
- Metabolic Maintenance Products, Inc.norm: metabolic maintenance products
Incident
- Discovered
- Sep 29, 2020
- Materiality determined
- —
- Notification sent
- Dec 22, 2020
- Affected individuals
- 27
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 12 weeks(85 days from discovery to filing)
- Compliance flags
- ME AG >30d · 85dME resident >60d · 84d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 29, 2020→ Filed with AG: Dec 23, 202085d 30 days (soft) ME AG >30d Maine Discovered: Sep 29, 2020→ Notified: Dec 22, 202084d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.