MalwareRansomwareData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Harry Norman, Realtors
bd_a3a7d711fb8803df · schema v1 · pii pii-v1
Full breach record for Harry Norman, Realtors →Harry Norman, REALTORS, a Georgia-based real estate services firm, reported a ransomware incident occurring between November 4, 2020, and December 29, 2020. The breach affected 6,021 individuals, including 1 Maine resident. The attacker encrypted data and exfiltrated names and Social Security Numbers. The company notified affected individuals on March 3, 2021, and provided two years of credit monitoring and identity restoration services through Experian.
Maine clockDiscovered Dec 27, 2020 → Filed with AG Mar 3, 202166d ⏱ ME AG >30d9 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_cde25faeded40dffMontana State AGfiled 2021-03-03Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/aefea21e-cc37-406a-8716-a7c1f951de23.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 3, 2021
- Raw hash
- b46a17cb30938d83250345495c146b77efad32f71cfe7812a35a9796da547b30
Reporting entity
- Name
- Harry Norman, Realtorsnorm: harry norman realtors
Victim entity
- Name
- Harry Norman, Realtorsnorm: harry norman realtors
Incident
- Discovered
- Dec 27, 2020
- Materiality determined
- —
- Notification sent
- Mar 3, 2021
- Affected individuals
- 6,021
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 9 weeks(66 days from discovery to filing)
- Compliance flags
- ME AG >30d · 66dME resident >60d · 66d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 27, 2020→ Filed with AG: Mar 3, 202166d 30 days (soft) ME AG >30d Maine Discovered: Dec 27, 2020→ Notified: Mar 3, 202166d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.