HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMedium
Shawmut Communications Group
bd_b4d8b184b303e2f9 · schema v1 · pii pii-v1
Full breach record for Shawmut Communications Group →Shawmut Communications Group, a commercial entity, reported a data breach to the Maine Attorney General's office. The breach was an external system hacking incident that occurred and was discovered on October 26, 2021. It affected 4 Maine residents, compromising their names and Social Security numbers. The company notified the affected individuals in writing on February 8, 2022, and offered two years of identity monitoring and restoration services through a third-party provider, IDX.
Maine clockDiscovered Oct 26, 2021 → Filed with AG Feb 8, 2022105d ✗ ME AG >90d15 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/7d5b3edb-bddd-479e-afed-a93f7277b326.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 8, 2022
- Raw hash
- fbde44787792dd72d746dabc60f46e5ef7ab921f77de88a0c0a35f6dbe76cf1b
Reporting entity
- Name
- Shawmut Communications Groupnorm: shawmut communications
Victim entity
- Name
- Shawmut Communications Groupnorm: shawmut communications
Incident
- Discovered
- Oct 26, 2021
- Materiality determined
- —
- Notification sent
- Feb 8, 2022
- Affected individuals
- 4
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 15 weeks(105 days from discovery to filing)
- Compliance flags
- ME AG >90d · 105dME resident >60d · 105d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 26, 2021→ Filed with AG: Feb 8, 2022105d 90 days ME AG >90d Maine Discovered: Oct 26, 2021→ Notified: Feb 8, 2022105d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.