HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTHighContained
Comstar Technologies, LLC
bd_b95db5904d98be34 · schema v1 · pii pii-v1
Full breach record for Comstar Technologies, LLC →Comstar LLC, a professional services firm based in Rowley, MA, reported an external system breach occurring between March 19 and March 26, 2022. The incident affected 565,790 individuals, including 16,220 Maine residents. The breach involved the unauthorized acquisition of names and financial account numbers (including credit/debit card numbers with security codes/PINs). Comstar notified affected consumers in writing in May and June 2022 and provided 12 months of credit monitoring and identity theft insurance through Equifax.
Maine clockDiscovered Mar 26, 2022 → Filed with AG Jun 30, 202296d ✗ ME AG >90d14 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_d818ee99f86b12ddCalifornia State AGfiled 2022-06-30Verified
- bd_85177613717390c1California State AGfiled 2022-06-14(16d gap)Verified
- bd_7c3a134ab345e736HHS OCRfiled 2022-05-26(35d gap)Verified
- bd_7e62f29ad917b45dMontana State AGfiled 2022-05-25(36d gap)Verified
Show 3 more filings ↓Show fewer ↑up to 53d gap
- bd_2302ead0876e2449Maine State AGfiled 2022-05-23(38d gap)Verified
- bd_1a59883a0195e6ffMaine State AGfiled 2022-08-22(53d gap)Verified
- bd_464f9d9da319c021California State AGfiled 2022-08-22(53d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0519191e-953f-4ad9-a5b4-a978bccbd85e.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 30, 2022
- Raw hash
- 1e676a61161f51e7efddd65e6e267092cfde3dd8485f584aed6cf59f08d05b82
Reporting entity
- Name
- Comstar Technologies, LLCnorm: comstar technologies
- Domain
- comstarbilling.com
Victim entity
- Name
- Comstar Technologies, LLCnorm: comstar technologies
- Domain
- comstarbilling.com
Incident
- Discovered
- Mar 26, 2022
- Materiality determined
- —
- Notification sent
- May 23, 2022
- Affected individuals
- 565,790
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 14 weeks(96 days from discovery to filing)
- Compliance flags
- ME AG >90d · 96d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 26, 2022→ Filed with AG: Jun 30, 202296d 90 days ME AG >90d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.