HackingProfessional ServicesProfessional ServicesTargetedCustomer Data InvolvedIdentity (basic)MediumContained

PRESTIGE MAINTENANCE USA, LTD.

bd_c0de7bc1ca1ed297 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 17, 2025

Filed

Jul 22, 2025

To disclose

27 weeks

Affected · nationwide

65,4521 in this filing

Linked

10 records

Confidence

65%

Full breach record for PRESTIGE MAINTENANCE USA, LTD. →2 incidents on file

Prestige Maintenance USA reported an external system breach (hacking) occurring on January 17, 2025, discovered on July 14, 2025. Approximately 65,452 individuals were affected, including 1 Maine resident. The incident involved unauthorized access to personal information (names and other identifiers). The company notified law enforcement, engaged independent experts, and provided 12 months of credit monitoring through IDX.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d27 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 27 weeks / 186 days

Jan 17, 2025

Begins

Jan 17, 2025

Discovered

Jul 22, 2025

Filed

vs. sector median

+7 wks slower

This filing is one of 10 records about the same incident.View merged incident

A leak claim by medusa about this victim was first seen 188 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitemedusabd_859cc805d4d1b1232025-01-15 · +187dVerified by operator

Regulatory filings (8) · sorted by filing gap

Nebraska State AGbd_32ee38c1de358dc42025-07-22Verified
New Hampshire State AGbd_373a1718d95089902025-07-22Verified by operator
Iowa State AGbd_844de8b7bed672ce2025-07-22Verified by operator
Indiana State AGbd_89a2a8916558168a2025-07-22Verified by operator

Show 4 more filings ↓up to 21d gap

California State AGbd_f24fe53d76c0e4de2025-07-22Verified by operator
Massachusetts State AGbd_1698503814af35972025-07-24 · +2dVerified
Texas State AGbd_2a89c2416d9135b02025-07-24 · +2dVerified
Illinois State AGbd_98a94576b132df5d2025-07-01 · +21dVerified

Name: Constangy, Brooks, Smith & Prophete, LLP
norm: constangy brooks smith prophete

Name: PRESTIGE MAINTENANCE USA, LTD.
norm: prestige maintenance usa
Domain: prestigeusa.net
Industry: Professional Servicesllm

Discovered: Jan 17, 2025
Breach occurred: Jan 17, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 22, 2025
Affected individuals: 65,452state + nationwide
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Maine Attorney General
Initial access: exploit_public_facing

During the incident: Notified law enforcement
Engaged independent experts to assist
Provided access to credit monitoring services for 12 months through IDX
Changes made: Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing information on how to place a fraud alert and security freeze on one’s credit file
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 weeks(186 days from discovery to filing)
Compliance flags: Leak >180dME AG >30d · 186dME resident >60d · 186d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jan 17, 2025
→ Filed with AG: Jul 22, 2025
186d 30 days (soft) ME AG >30d
Maine
Discovered: Jan 17, 2025
→ Notified: Jul 22, 2025
186d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jan 17, 2025 → Filed with AG: Jul 22, 2025	186d	30 days (soft)	ME AG >30d
Maine	Discovered: Jan 17, 2025 → Notified: Jul 22, 2025	186d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Illinois State AGJul 1 · first

Nebraska State AG+21d

New Hampshire State AG+21d

Iowa State AG+21d

Indiana State AG+21d

California State AG+21d

Maine State AG+21d · this page

Massachusetts State AG+23d

Texas State AG+23d

Pattern: first filing Jul 1 (IL), last Jul 24 (TX) — a 23-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/98dbee3c-4c46-464a-b38f-af89ad185d2a.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 22, 2025
Raw hash: 1cf132d9771303c07d06f6ca14bad33a84f95c84b8fee6a2fee19f42d75cc50f

Linked disclosures

Ransomware claims (1)

Regulatory filings (8) · sorted by filing gap

Reporting entityConstangy, Brooks, Smith & Prophete, LLP

Victim entityPRESTIGE MAINTENANCE USA, LTD.

Incidentdiscovered Jan 17, 2025

Stated responseNotified law enforcement

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov