HackingCustomer Data InvolvedData ExfiltratedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumContained
The Institute for Human Resources and Services Inc.
bd_9f2f38dd88d3d2c6 · schema v1 · pii pii-v1
Full breach record for The Institute for Human Resources and Services Inc. →IHRS (non-profit, Kingston PA) suffered an external breach Aug 13-14, 2025 when an unknown actor accessed systems. Data exposed: name, SSN, driver's license. Discovered Aug 14, 2025; review completed Dec 10, 2025. Three Maine residents notified Feb 11, 2026. Federal law enforcement notified. Kroll credit/identity monitoring (12 months) offered to affected individuals.
Maine clockDiscovered Aug 14, 2025 → Filed with AG Feb 11, 2026181d ✗ ME AG >90d26 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_38d9d3c25334871fIndiana State AGfiled 2026-02-11Candidate
- bd_ef58961125ef09f1Indiana State AGfiled 2026-02-11Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/71697961-6085-4ab7-803f-aee11d4a40df.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 11, 2026
- Raw hash
- d2061c913697711ee90f1ac3b10df3b9317d0b074ce25313a1d20e98d4c855e3
Reporting entity
- Name
- The Institute for Human Resources and Services Inc.norm: the institute for human resources and
- Domain
- ihrser.com
- Industry
- Non-Profit
Victim entity
- Name
- The Institute for Human Resources and Services Inc.norm: the institute for human resources and
- Domain
- ihrser.com
- Industry
- Non-Profit
Incident
- Discovered
- Aug 14, 2025
- Materiality determined
- —
- Notification sent
- Feb 11, 2026
- Affected individuals
- 3
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
- Regulator citations
- Notified federal law enforcementNotified three major credit reporting agenciesNotified major media outletsNotified relevant state regulators
Compliance
- Time to disclose
- 26 weeks(181 days from discovery to filing)
- Compliance flags
- ME AG >90d · 181dME resident >180d · 181d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 14, 2025→ Filed with AG: Feb 11, 2026181d 90 days ME AG >90d Maine Discovered: Aug 14, 2025→ Notified: Feb 11, 2026181d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.