HackingCustomer Data InvolvedPIILowContained
LEGO BrickLink, Inc.
bd_9c2ec6af8f3abbe2 · schema v1 · pii pii-v1
Full breach record for LEGO BrickLink, Inc. →LEGO BrickLink, Inc. reported an external system breach (hacking) on November 3, 2023, affecting 188 individuals, including 3 Maine residents. The breach was discovered on the same date, and electronic notifications were sent to affected consumers on November 9, 2023. No identity theft protection services were offered.
Maine clockDiscovered Nov 3, 2023 → Filed with AG Nov 9, 20236d ✓ ME AG ≤30d6 days discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_7f9eafb8ee48301fMaine State AGfiled 2023-11-09Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/04827f62-9e55-4052-b402-ac97fa765cac.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 9, 2023
- Raw hash
- 7e0b0ceed0739d705356f1079b2b7e268ded7f607ec4ab45156202522fa79d7a
Reporting entity
- Name
- LEGO BrickLink, Inc.norm: lego bricklink
Victim entity
- Name
- LEGO BrickLink, Inc.norm: lego bricklink
Incident
- Discovered
- Nov 3, 2023
- Materiality determined
- —
- Notification sent
- Nov 9, 2023
- Affected individuals
- 188
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 days(6 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 6d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 3, 2023→ Filed with AG: Nov 9, 20236d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.