HackingData ExfiltratedPIIMediumContained
Sterling
bd_ba9145ecccf11312 · schema v1 · pii pii-v1
Full breach record for Sterling →Sterling Seacrest Pritchard, Inc. reported an external system breach (hacking) occurring August 12-13, 2025, discovered March 19, 2025. The incident affected 8,651 individuals, including 21 Maine residents. The firm notified consumers in writing on May 19, 2026, and provided 12 months of credit monitoring and identity theft restoration services through Kroll.
Maine clockDiscovered Mar 19, 2025 → Filed with AG May 21, 2026428d ✗ ME AG >90d14 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
A leak claim by black_basta about this victim predates this filing by 1249 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_61b6c7f9d335b96bNew Hampshire State AGfiled 2026-05-19(2d gap)Verified
- bd_5d155bf5e75159b1New Hampshire State AGfiled 2026-06-17(27d gap)Verified
- bd_a2bac98dc6f5e945New Hampshire State AGfiled 2026-03-27(55d gap)Candidate
- bd_3be48f35f380de72Indiana State AGfiled 2026-03-25(57d gap)Candidate
Show 1 more filing ↓Show fewer ↑up to 57d gap
- bd_d3c3d7329b967472Indiana State AGfiled 2026-03-25(57d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b719da6b-e848-4e2c-981b-0af9a7886c24.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 21, 2026
- Raw hash
- c098c3708217bcfabc908fcfc5461d3d99b3df8b511c0a5df13d3a6ef8dd6591
Reporting entity
- Name
- Sterlingnorm: sterling
- Domain
- sterling.com
Victim entity
- Name
- Sterlingnorm: sterling
- Domain
- sterling.com
Incident
- Discovered
- Mar 19, 2025
- Materiality determined
- —
- Notification sent
- May 19, 2026
- Affected individuals
- 8,651
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 14 months(428 days from discovery to filing)
- Compliance flags
- ME AG >90d · 428dME resident >180d · 426dLeak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 19, 2025→ Filed with AG: May 21, 2026428d 90 days ME AG >90d Maine Discovered: Mar 19, 2025→ Notified: May 19, 2026426d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.