HackingVulnerability ExploitStolen CredentialsCustomer Data InvolvedPIIIDENTITY_GOVERNMENTHighContained
Estes Forwarding Worldwide
bd_b8cff546a41f31d1 · schema v1 · pii pii-v1
Full breach record for Estes Forwarding Worldwide →Estes Forwarding Worldwide reported an external system breach (hacking) occurring on May 28, 2025, discovered March 16, 2026, affecting 2,092 individuals, including 1 Maine resident. The organization notified affected parties and offered 12 months of identity theft protection services via Experian. No ransomware, phishing, or insider activity was reported.
Leak gap clock✗ Leak >180d18 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
A leak claim by qilin about this victim predates this filing by 675 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_d64b005892327d47Indiana State AGfiled 2026-04-03Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/16560f0b-8945-4029-85ee-e76126366c27.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 3, 2026
- Raw hash
- 7b4dbcc91f597ae7e69174aa283314879cb707b1d3838f60a0995e4bbcea96b4
Reporting entity
- Name
- MCDONALD HOPKINS LLCnorm: mcdonald hopkins
Victim entity
- Name
- Estes Forwarding Worldwidenorm: estes forwarding
- Domain
- efwnow.com
Incident
- Discovered
- Mar 16, 2026
- Materiality determined
- —
- Notification sent
- Apr 3, 2026
- Affected individuals
- 2,092
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notification with Office of the Maine Attorney General
Compliance
- Time to disclose
- 18 days(18 days from discovery to filing)
- Compliance flags
- Leak >180dME AG ≤30d · 18d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 16, 2026→ Filed with AG: Apr 3, 202618d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.