HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Constellation
bd_b9631555636ec7d9 · schema v1 · pii pii-v1
Full breach record for Constellation →Constellation Software Inc. reported an external system breach (hacking) occurring between February 27, 2023, and April 3, 2023. The incident affected 1,105 individuals, including 3 Maine residents. Acquired data included names and financial account or credit/debit card numbers (with security codes/PINs). The company provided written notification on May 8, 2023, and offered one year of credit monitoring and identity protection services via TransUnion.
Maine clockDiscovered Apr 27, 2023 → Filed with AG May 25, 202328d ✓ ME AG ≤30d28 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_5956b91aa79a4b36New Hampshire State AGfiled 2023-05-25Verified
- bd_b6cc684d4d89fc1aVermont State AGfiled 2023-05-12(13d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1ed405ac-f0bd-4749-8968-537f12fd7a76.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 25, 2023
- Raw hash
- 5c5269c1d3c8ad6e34407a06deb21dbde02213fa9e00d14ebff6bd4818b3e40c
Reporting entity
- Name
- Constellationnorm: constellation
- Domain
- constellation.com
Victim entity
- Name
- Constellationnorm: constellation
- Domain
- constellation.com
Incident
- Discovered
- Apr 27, 2023
- Materiality determined
- —
- Notification sent
- May 8, 2023
- Affected individuals
- 1,105
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 28d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 27, 2023→ Filed with AG: May 25, 202328d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.