HackingVulnerability ExploitCustomer Data InvolvedPIILowContained
Carlysle Engineering, Inc.
bd_ad4dba05a8f20d9f · schema v1 · pii pii-v1
Full breach record for Carlysle Engineering, Inc. →Carlysle Engineering, Inc, a commercial engineering firm, notified of an external system breach (hacking) on 03/23/2026 affecting 156 persons, including 1 Maine resident. The organization offered identity theft protection services to affected individuals.
Maine clockDiscovered Mar 23, 2026 → Filed with AG May 14, 202652d ⏱ ME AG >30d7 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_ea8abc29297e1932Massachusetts State AGfiled 2026-05-01(13d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/567cda36-c657-4c16-878c-621d23b8c58a.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 14, 2026
- Raw hash
- 9fe016be89656a0a1ae3b109bd3bf26020fa086ad4e19c0b915f237ab796aced
Reporting entity
- Name
- Carlysle Engineering, Inc.norm: carlysle engineering
Victim entity
- Name
- Carlysle Engineering, Inc.norm: carlysle engineering
Incident
- Discovered
- Mar 23, 2026
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 156
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed reporting form with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 7 weeks(52 days from discovery to filing)
- Compliance flags
- ME AG >30d · 52d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 23, 2026→ Filed with AG: May 14, 202652d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.