HackingVulnerability ExploitCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Bibles in Bulk
bd_ab767505befe3ce1 · schema v1 · pii pii-v1
Full breach record for Bibles in Bulk →Bibles in Bulk experienced an external system breach (hacking) on April 27, 2023, discovered on June 29, 2023. The incident affected 5,457 individuals, including 19 Maine residents. Acquired data included names and financial account or credit/debit card numbers (with security codes/PINs). The company provided written notification on July 28, 2023, and offered 12 months of credit monitoring through IDX.
Maine clockDiscovered Jun 29, 2023 → Filed with AG Jul 28, 202329d ✓ ME AG ≤30d29 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_06c013668bcfe6b3Vermont State AGfiled 2023-07-28Verified
- bd_9c6af6721d3e9519Montana State AGfiled 2023-07-28Candidate
- bd_0aec051b7ef7095aVermont State AGfiled 2023-07-11(17d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1ca553b2-15db-495f-8465-5fa3ce7dee31.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 28, 2023
- Raw hash
- 52b7e902feb5d785b5dc40a286fd4506b25c002ae88aedb8eb6dc6b96c34c82f
Reporting entity
- Name
- Bibles in Bulknorm: bibles in bulk
Victim entity
- Name
- Bibles in Bulknorm: bibles in bulk
Incident
- Discovered
- Jun 29, 2023
- Materiality determined
- —
- Notification sent
- Jul 28, 2023
- Affected individuals
- 5,457
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 29 days(29 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 29d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 29, 2023→ Filed with AG: Jul 28, 202329d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.