HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighResolved
Four B Corp.
bd_c4d508e23da576d2 · schema v1 · pii pii-v1
Full breach record for Four B Corp. →Four B Corp. experienced an external system breach (hacking) on September 26, 2021, affecting 14,639 individuals, including 3 in Maine. The incident compromised names and driver's license numbers. The company provided written notification on December 30, 2021, and offered 12 months of identity theft protection services.
Maine clockDiscovered Sep 26, 2021 → Filed with AG Dec 30, 202195d ✗ ME AG >90d14 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_25d7c3c6d6f7afbfMontana State AGfiled 2021-12-30Candidate
- bd_f34fa9bbf99e2a25New Hampshire State AGfiled 2021-12-30Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/10c359da-5b6f-4fae-9b5b-47e1d959be02.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 30, 2021
- Raw hash
- 78dfac71be42579237b416105356efb27caf214dc96c2a99cad679d0ca6f77a3
Reporting entity
- Name
- Four B Corp.norm: four b
Victim entity
- Name
- Four B Corp.norm: four b
Incident
- Discovered
- Sep 26, 2021
- Materiality determined
- —
- Notification sent
- Dec 30, 2021
- Affected individuals
- 14,639
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 14 weeks(95 days from discovery to filing)
- Compliance flags
- ME AG >90d · 95dME resident >60d · 95d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 26, 2021→ Filed with AG: Dec 30, 202195d 90 days ME AG >90d Maine Discovered: Sep 26, 2021→ Notified: Dec 30, 202195d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.