HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
CAMBREX CORPORATION
bd_a42b26b6377bce74 · schema v1 · pii pii-v1
Full breach record for CAMBREX CORPORATION →Cambrex Corporation reported a data breach affecting 2 Maine residents. The breach, which occurred and was discovered on November 8, 2023, was described as an external system breach (hacking). The compromised information includes names and driver's license or non-driver identification card numbers. Affected individuals were notified on May 20, 2024, and offered 24 months of identity theft protection services.
Maine clockDiscovered Nov 8, 2023 → Filed with AG May 20, 2024194d ✗ ME AG >90d28 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_90c7433f3afa4e01Vermont State AGfiled 2024-05-20Verified
- bd_db681bc8acb4239dIndiana State AGfiled 2024-05-20Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/aaeb0938-3aad-4be7-a949-d8d0111cfe25.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 20, 2024
- Raw hash
- 5f23825a5b679cf6cfc0a60b6249dd3d6cc758f7fd7e328669e617f1eb813618
Reporting entity
- Name
- CAMBREX CORPORATIONnorm: cambrex
Victim entity
- Name
- CAMBREX CORPORATIONnorm: cambrex
Incident
- Discovered
- Nov 8, 2023
- Materiality determined
- —
- Notification sent
- May 20, 2024
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 28 weeks(194 days from discovery to filing)
- Compliance flags
- ME AG >90d · 194dME resident >180d · 194d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 8, 2023→ Filed with AG: May 20, 2024194d 90 days ME AG >90d Maine Discovered: Nov 8, 2023→ Notified: May 20, 2024194d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.