HackingProfessional ServicesProfessional ServicesData ExfiltratedTargetedIdentity (basic)HighContained

The Alcohol & Drug Testing Service

bd_a43501eb14f849b3 · schema v1 · pii pii-v1

Severity

High

Discovered

Jul 9, 2024

Filed

Jul 17, 2025

To disclose

12 months

Affected · nationwide

748,7632 in this filing

Linked

7 filings

Confidence

66%

Full breach record for The Alcohol & Drug Testing Service →

The Alcohol & Drug Testing Service reported an external system breach (hacking) occurring on July 4, 2024, discovered on July 9, 2024. The incident affected 748,763 individuals nationwide, including 2 Maine residents. Personal information (names and other identifiers) was downloaded by an unauthorized actor. The company engaged cybersecurity professionals, reported the incident to federal law enforcement, and sent written notifications on July 17, 2025.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jul 9, 2024 → Filed with AG Jul 17, 2025373d ✗ ME AG >90d12 months discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 5 days

discovery → filing · 12 months / 373 days

Jul 4, 2024

Begins

Jul 9, 2024

Discovered

Jul 17, 2025

Filed

vs. sector median

+36 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Vermont State AGbd_032ba889daf3b6df2025-07-17Verified
Indiana State AGbd_70bb2c27a097250b2025-07-17Verified
Nebraska State AGbd_c4000540fa8962842025-07-17Verified
Massachusetts State AGbd_f37709087b93056b2025-07-17Verified

Show 2 more filings ↓up to 4d gap

Texas State AGbd_01a2fb67a87c9b5d2025-07-18 · +1dVerified
New Hampshire State AGbd_1c65f70955be2f752025-07-21 · +4dVerified

Name: The Alcohol & Drug Testing Service
norm: the alcohol drug testing service

Name: The Alcohol & Drug Testing Service
norm: the alcohol drug testing service
Industry: Professional Servicesllm

Discovered: Jul 9, 2024
Breach occurred: Jul 4, 2024
Undetected for: 5 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 17, 2025
Affected individuals: 748,763state + nationwide
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: reported this matter to federal law enforcementreported this Incident to relevant government agencies
Initial access: exploit_public_facing

During the incident: Changing passwords
Enhancing our endpoint detection protocols
Engaging experienced privacy and cybersecurity professionals to assist
Reported this matter to federal law enforcement
Changes made: Resetting all passwords
Implementing additional monitoring tools on top of our existing protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 months(373 days from discovery to filing)
Compliance flags: ME AG >90d · 373dME resident >180d · 373d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jul 9, 2024
→ Filed with AG: Jul 17, 2025
373d 90 days ME AG >90d
Maine
Discovered: Jul 9, 2024
→ Notified: Jul 17, 2025
373d 180 days ME resident >180d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jul 9, 2024 → Filed with AG: Jul 17, 2025	373d	90 days	ME AG >90d
Maine	Discovered: Jul 9, 2024 → Notified: Jul 17, 2025	373d	180 days	ME resident >180d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Vermont State AGJul 17 · first

Indiana State AGJul 17 · first

Nebraska State AGJul 17 · first

Massachusetts State AGJul 17 · first

Maine State AGJul 17 · first · this page

Texas State AG+1d

New Hampshire State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e987c96e-5f4d-4312-9518-10d9ac360450.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 17, 2025
Raw hash: 76e7b9ecd858d54a25c3ea6adbe9be60df03f666be98108e75549d16e42aab27

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityThe Alcohol & Drug Testing Service

Victim entityThe Alcohol & Drug Testing Service

Incidentdiscovered Jul 9, 2024

Stated responseChanging passwords

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov