HackingSupply Chain (3P Vendor)Employee Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTMedium
Carvin Software & Consulting Services
bd_b1780282bfbeff67 · schema v1 · pii pii-v1
Full breach record for Carvin Software & Consulting Services →Pirate Staffing (also known as RedCap Staffing) reported a data breach impacting a former employee after its software provider, Carvin Software & Consulting Services, suffered an internal system breach. The incident occurred between February 22, 2023, and March 9, 2023. It was discovered on May 2, 2023, upon receiving a notification letter from Carvin Software. The breach resulted in the compromise of the former employee's name and Social Security number. The affected individual was notified on May 2, 2023, and offered 12 months of identity theft protection services.
Maine clockDiscovered May 2, 2023 → Filed with AG May 12, 202310d ✓ ME AG ≤30d10 days discovery → filing
⚠ notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/af176794-2a6b-4b46-84fa-e1c85f9ed3c5.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 12, 2023
- Raw hash
- 1559288db0acfb4ea9f7a7bb95fbf72d70da7c649f304f265def6693dab12d63
Reporting entity
- Name
- Pirate Staffingnorm: pirate staffing
Victim entity
- Name
- Carvin Software & Consulting Servicesnorm: carvin software consulting
Incident
- Discovered
- May 2, 2023
- Materiality determined
- —
- Notification sent
- May 2, 2023
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
Compliance
- Time to disclose
- 10 days(10 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 10d
- Discovery-date grounding
- notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 2, 2023→ Filed with AG: May 12, 202310d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.