HackingCustomer Data InvolvedDelayed DiscoveryPIILowContained
LenelS2
bd_a9567ea3e31c110b · schema v1 · pii pii-v1
Full breach record for LenelS2 →LenelS2 (Framingham, MA) identified unauthorized access to a portion of its network on November 4, 2024. The investigation determined on December 9, 2024 that personal information of 548 individuals (1 Maine resident) may have been accessed by an unauthorized third party. LenelS2 contacted law enforcement, blocked the unauthorized access, and secured impacted systems. Affected individuals were notified on December 18, 2024 and offered 24-month Experian identity protection services.
Maine clockDiscovered Nov 4, 2024 → Filed with AG Dec 22, 202448d ⏱ ME AG >30d7 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
A leak claim by play about this victim predates this filing by 59 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_2dcf46e5c64b6b66New Hampshire State AGfiled 2024-12-18(4d gap)Verified
- bd_c86cad69136d2a2eIndiana State AGfiled 2024-12-18(4d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/bdbe2f13-6455-4be2-b209-ead8f9b50b28.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 22, 2024
- Raw hash
- f867359a33c11cd998bba15c4554b100016dd0551cea72ebbb216e243f790271
Reporting entity
- Name
- LenelS2norm: lenels2
- Domain
- lenels2.com
- Industry
- Other Commercial
Victim entity
- Name
- LenelS2norm: lenels2
- Domain
- lenels2.com
- Industry
- Other Commercial
Incident
- Discovered
- Nov 4, 2024
- Materiality determined
- Dec 9, 2024
- Notification sent
- Dec 18, 2024
- Affected individuals
- 1
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Maine Attorney General per state breach notification law
Compliance
- Time to disclose
- 7 weeks(48 days from discovery to filing)
- Compliance flags
- ME AG >30d · 48dLeak >30d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 4, 2024→ Filed with AG: Dec 22, 202448d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.