HackingCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumContained
General Digital Corporation
bd_a7681115c25eb9dd · schema v1 · pii pii-v1
Full breach record for General Digital Corporation →General Digital Corporation (East Hartford, CT) reported an external system breach in which an unauthorized actor accessed the company network between January 10 and January 20, 2025. The actor viewed or copied files containing names and Social Security numbers. The breach was discovered April 21, 2025. One Maine resident was affected out of 114 total. Affected individuals were notified June 5, 2025 and offered 12 months of IDX credit monitoring.
Maine clockDiscovered Apr 21, 2025 → Filed with AG Jun 5, 202545d ⏱ ME AG >30d6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
A leak claim by spacebears about this victim predates this filing by 147 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_f39493b412d3a548Leak Sitespacebearsfiled 2025-01-08(148d gap)Verified by operator
Regulatory filings (1) · sorted by filing gap
- bd_bf2e38a1416fa0a5New Hampshire State AGfiled 2025-06-05Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/7babd7c1-1e25-4f66-ac81-f826ffed9b8a.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 5, 2025
- Raw hash
- 5eaa107268ea0792d585e808d1dd7147cd3c58aacc3bcdd561bf3f903b031133
Reporting entity
- Name
- General Digital Corporationnorm: general digital
- Domain
- generaldigital.com
- Industry
- Other Commercial
Victim entity
- Name
- General Digital Corporationnorm: general digital
- Domain
- generaldigital.com
- Industry
- Other Commercial
Incident
- Discovered
- Apr 21, 2025
- Materiality determined
- —
- Notification sent
- Jun 5, 2025
- Affected individuals
- 1
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified Maine Attorney GeneralNotified federal law enforcementNotified relevant state and federal regulators
Compliance
- Time to disclose
- 6 weeks(45 days from discovery to filing)
- Compliance flags
- ME AG >30d · 45dLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 21, 2025→ Filed with AG: Jun 5, 202545d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.