HackingTechnologyInformationCustomer Data InvolvedIdentity (basic)Government IDMediumContained

LenelS2

bd_a9567ea3e31c110b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 4, 2024

Filed

Dec 22, 2024

To disclose

7 weeks

Affected · nationwide

5481 in this filing

Linked

5 filings

Confidence

65%

Full breach record for LenelS2 →

LenelS2 reported an external system breach (hacking) on November 4, 2024, affecting 548 individuals, including 1 Maine resident. The breach involved unauthorized access to personal information. LenelS2 contacted law enforcement, blocked access, and secured systems. Affected individuals were notified on December 18, 2024, and offered 24 months of credit monitoring via Experian.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Nov 4, 2024 → Filed with AG Dec 22, 202448d ⏱ ME AG >30d7 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 7 weeks / 48 days

Nov 4, 2024

Begins

Nov 4, 2024

Discovered

Dec 22, 2024

Filed

vs. sector median

12 wks faster

This filing is one of 5 about the same incident.View merged incident

A leak claim by play about this victim predates this filing by 59 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteplaybd_14c730967d498db42024-10-24 · +59dVerified

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_aaa137d117733bc72024-12-23 · +1dVerified by operator
New Hampshire State AGbd_2dcf46e5c64b6b662024-12-18 · +4dVerified
Indiana State AGbd_c86cad69136d2a2e2024-12-18 · +4dVerified

Name: LenelS2
norm: lenels2
Domain: lenels2.com

Name: LenelS2
norm: lenels2
Domain: lenels2.com
Industry: Technologyllm

Discovered: Nov 4, 2024
Breach occurred: Nov 4, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 18, 2024
Affected individuals: 548state + nationwide
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Filed notice with Maine Attorney General
Initial access: exploit_public_facing

During the incident: Contacted law enforcement
Blocked the unauthorized access
Secured all impacted systems
Changes made: Offered 24 months of complimentary credit monitoring and identity protection services through Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(48 days from discovery to filing)
Compliance flags: ME AG >30d · 48dLeak >30d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Nov 4, 2024
→ Filed with AG: Dec 22, 2024
48d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Nov 4, 2024 → Filed with AG: Dec 22, 2024	48d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

New Hampshire State AGDec 18 · first

Indiana State AGDec 18 · first

Maine State AG+4d · this page

Massachusetts State AG+5d

Pattern: first filing Dec 18 (NH), last Dec 23 (MA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/bdbe2f13-6455-4be2-b209-ead8f9b50b28.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 22, 2024
Raw hash: f867359a33c11cd998bba15c4554b100016dd0551cea72ebbb216e243f790271

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityLenelS2

Victim entityLenelS2

Incidentdiscovered Nov 4, 2024

Stated responseContacted law enforcement

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov