HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedGovernment IDIdentity (basic)HighContained

Gardner Resources Consulting LLC

bd_c41945a7367529e2 · schema v1 · pii pii-v1

Severity

High

Discovered

Sep 3, 2021

Filed

Jul 29, 2022

To disclose

47 weeks

Affected · nationwide

8,96947 in this filing

Linked

4 filings

Confidence

66%

Full breach record for Gardner Resources Consulting LLC →

Gardner Resources Consulting LLC reported an external system breach (hacking) on September 3, 2021, affecting 8,969 individuals, including 47 Maine residents. The incident involved the acquisition of names and Social Security Numbers. The company provided substitute notice on July 29, 2022, and offered one year of TransUnion myTrueIdentity services.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Sep 3, 2021 → Filed with AG Jul 29, 2022329d ✗ ME AG >90d47 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 47 weeks / 329 days

Sep 3, 2021

Begins

Sep 3, 2021

Discovered

Jul 29, 2022

Filed

vs. sector median

+28 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_d2ecf958649ed76a2022-07-29Verified
Massachusetts State AGbd_ec41be20ef30c2c12022-07-29Verified
New Hampshire State AGbd_544f8dd24d1c0efb2022-08-01 · +3dVerified

Name: Gardner Resources Consulting LLC
norm: gardner resources consulting

Name: Gardner Resources Consulting LLC
norm: gardner resources consulting
Industry: Professional Servicesllm

Discovered: Sep 3, 2021
Breach occurred: Sep 3, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 29, 2022
Affected individuals: 8,969state + nationwide
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Initial access: exploit_public_facing

During the incident: Provided substitute notice to affected individuals
Posted notice on its homepage
Provided media notice
Offered 1 year of TransUnion myTrueIdentity identity theft protection services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 47 weeks(329 days from discovery to filing)
Compliance flags: ME AG >90d · 329dME resident >180d · 329d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Sep 3, 2021
→ Filed with AG: Jul 29, 2022
329d 90 days ME AG >90d
Maine
Discovered: Sep 3, 2021
→ Notified: Jul 29, 2022
329d 180 days ME resident >180d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Sep 3, 2021 → Filed with AG: Jul 29, 2022	329d	90 days	ME AG >90d
Maine	Discovered: Sep 3, 2021 → Notified: Jul 29, 2022	329d	180 days	ME resident >180d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGJul 29 · first

Massachusetts State AGJul 29 · first

Maine State AGJul 29 · first · this page

New Hampshire State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/15d5d7b6-c1c1-4ba1-948e-beefc41dbd8b.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 29, 2022
Raw hash: f8d66be2e973b65f480c02c70f97c0638254eee90ca24eb00ebbd68dcb307948

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityGardner Resources Consulting LLC

Victim entityGardner Resources Consulting LLC

Incidentdiscovered Sep 3, 2021

Stated responseProvided substitute notice to affected individuals

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov