HackingTechnologyInformationData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountFinancial credentialsHighContained

Solairus Aviation, LLC

bd_a3903045978c9021 · schema v1 · pii pii-v1

Severity

High

Discovered

Aug 31, 2024

Filed

Oct 28, 2024

To disclose

8 weeks

Affected · nationwide

4,95018 in this filing

Linked

7 filings

Confidence

66%

Full breach record for Solairus Aviation, LLC →2 incidents on file

Solairus Aviation, LLC reported an external system breach (hacking) on August 31, 2024, affecting 4,950 individuals, including 18 Maine residents. The incident involved unauthorized access to files containing employee and customer PII, including SSNs, driver's license numbers, health insurance info, and financial account numbers. Notifications were sent on October 25, 2024, and Experian credit monitoring services were offered.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Aug 31, 2024 → Filed with AG Oct 28, 202458d ⏱ ME AG >30d8 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 8 weeks / 58 days

Aug 31, 2024

Begins

Aug 31, 2024

Discovered

Oct 28, 2024

Filed

vs. sector median

10 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

New Hampshire State AGbd_0013707c6b69ead32024-10-28Verified
California State AGbd_32c721d973f44f442024-10-28Verified
Montana State AGbd_d181dfc30b4930322024-10-28Candidate
Massachusetts State AGbd_6d944af2e087e5092024-10-29 · +1dVerified

Show 2 more filings ↓up to 3d gap

Indiana State AGbd_1c0340fd681415962024-10-25 · +3dVerified
Vermont State AGbd_aba2a82bb15542892024-10-25 · +3dVerified

Name: Solairus Aviation, LLC
norm: solairus aviation

Name: Solairus Aviation, LLC
norm: solairus aviation
Industry: Technologyllm

Discovered: Aug 31, 2024
Breach occurred: Aug 31, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 25, 2024
Affected individuals: 4,950state + nationwide
Data types: Identity (basic)Government IDFinancial accountFinancial credentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Filed notification with Maine Attorney General
Initial access: exploit_public_facing

During the incident: Took immediate steps to secure the network
Launched an investigation
Engaged cybersecurity experts to assist with the investigation and response
Changes made: Offering one year of complimentary credit monitoring, fraud consultation, and identity theft restoration services through Experian
Established a dedicated, toll-free call center to answer questions
Examining every aspect of this event to identify additional precautions to implement
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(58 days from discovery to filing)
Compliance flags: ME AG >30d · 58d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Aug 31, 2024
→ Filed with AG: Oct 28, 2024
58d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Aug 31, 2024 → Filed with AG: Oct 28, 2024	58d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Indiana State AGOct 25 · first

Vermont State AGOct 25 · first

New Hampshire State AG+3d

California State AG+3d

Montana State AG+3d

Maine State AG+3d · this page

Massachusetts State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/3b43f42e-9cf1-4513-b75b-388e79a6ceeb.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 28, 2024
Raw hash: 8cd1149a8a4bded28c061bdb53cab543f797c7723c97390fb29aab7d0d893890

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entitySolairus Aviation, LLC

Victim entitySolairus Aviation, LLC

Incidentdiscovered Aug 31, 2024

Stated responseTook immediate steps to secure the network

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov