DisclosureLens
HackingRetailIdentity (basic)Government IDHigh

Lexus of Smithtown

bd_c449ff8b0772f464 · schema v1 · pii pii-v1

Severity

High

Discovered

Jan 21, 2021

Filed

Apr 26, 2021

To disclose

14 weeks

Affected · nationwide

2,0551 in this filing

Linked

3 filings

Confidence

50%
Full breach record for Lexus of Smithtown →

Lexus of Smithtown reported a data breach to the Maine Attorney General, which was discovered on January 21, 2021, and occurred on September 10, 2020. The breach was an external system breach (hacking) that affected 1 Maine resident, compromising their name and driver's license or non-driver identification card number. The company offered identity theft protection services to those affected.

Maine clockDiscovered Jan 21, 2021 → Filed with AG Apr 26, 202195d ⏱ ME AG >30d14 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 133 days
discovery → filing · 14 weeks / 95 days

Sep 10, 2020

Begins

Jan 21, 2021

Discovered

Apr 26, 2021

Filed

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
Massachusetts State AGApr 26 · first
Maine State AGApr 26 · first · this page
New Hampshire State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.