HackingCustomer Data InvolvedData ExfiltratedDelayed DiscoveryIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSPCILowContained
The NOCO Company
bd_b96d97e8ca5f5338 · schema v1 · pii pii-v1
Full breach record for The NOCO Company →The NOCO Company experienced an external system breach (hacking) that occurred between October 8, 2019, and March 23, 2021. The breach was discovered on April 15, 2021. The incident resulted in the compromise of names and financial account or credit/debit card numbers, including security codes, for 5,743 individuals, including 24 residents of Maine. Affected individuals were notified on May 18, 2021.
Maine clockDiscovered Apr 15, 2021 → Filed with AG May 18, 202133d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed24 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/29c88bde-a520-4884-b2ba-b352f68dfc6d.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 18, 2021
- Raw hash
- dde3f8f6f5f776cce0d2fd259927c826ce179b7ee8318f2f9ee58b40ca0ece77
Reporting entity
- Name
- The NOCO Companynorm: the noco
- Domain
- noco.com
Victim entity
- Name
- The NOCO Companynorm: the noco
- Domain
- noco.com
Incident
- Discovered
- Apr 15, 2021
- Materiality determined
- —
- Notification sent
- May 18, 2021
- Affected individuals
- 24
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSPCI
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 5 weeks(33 days from discovery to filing)
- Compliance flags
- ME AG >30d · 33d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 15, 2021→ Filed with AG: May 18, 202133d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.