HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedDelayed DiscoveryPIILowContained
NAHGA Claim Services
bd_c7503f6c29bb2b5f · schema v1 · pii pii-v1
Full breach record for NAHGA Claim Services →NAHGA Claim Services, a commercial entity based in Bridgton, ME, reported an external system breach (hacking) that occurred between April 8–11, 2025, but was not discovered until December 2, 2025. A total of 181,160 individuals were affected nationally, including 474 Maine residents. Written notification was sent December 5, 2025. IDX identity protection services (12 months) were offered to affected individuals.
Maine clockDiscovered Dec 2, 2025 → Filed with AG Dec 12, 202510d ✓ ME AG ≤30d10 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_0024d349c6ebceabIowa State AGfiled 2025-12-11(1d gap)Candidate
- bd_af877aacbf143c17Oregon State AGfiled 2025-12-15(3d gap)Verified
- bd_cc6b9228066389efWashington State AGfiled 2025-12-15(3d gap)Verified
- bd_5ab38457ba2b9256Texas State AGfiled 2025-12-16(4d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/aebae3b4-d515-47fc-a280-5a0303fdf00d.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 12, 2025
- Raw hash
- 6e24962f442bf0672283aaf5c6421d95cf261ee7974d7a9cfac0634bc6806db5
Reporting entity
- Name
- NAHGA Claim Servicesnorm: nahga claim
- Industry
- Other Commercial
Victim entity
- Name
- NAHGA Claim Servicesnorm: nahga claim
- Industry
- Other Commercial
- Industry
- Professional Servicesllm
Incident
- Discovered
- Dec 2, 2025
- Materiality determined
- —
- Notification sent
- Dec 5, 2025
- Affected individuals
- 474
- Data types
- PII
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 10 days(10 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 10d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 2, 2025→ Filed with AG: Dec 12, 202510d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.