HackingCustomer Data InvolvedData ExfiltratedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumContained
Gustavo Preston
bd_c83cf117f752286a · schema v1 · pii pii-v1
Full breach record for Gustavo Preston →HydroServe LLC dba Gustavo Preston Company reported an external system breach (hacking) affecting 138 individuals total, including 1 Maine resident. An unknown actor gained unauthorized access to certain computer systems between October 6 and October 14, 2025, and was able to view or download data including names and Social Security numbers. The breach was discovered on November 21, 2025, and written notice was sent December 19, 2025. IDX credit monitoring was offered for 12 months.
Maine clockDiscovered Nov 21, 2025 → Filed with AG Dec 19, 202528d ✓ ME AG ≤30d28 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_5d56256449608a00Leak Siteakirafiled 2026-03-24(95d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1e92636b-0a09-4df6-be52-bcb8bab04a33.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 19, 2025
- Raw hash
- 99fcfe1d35173cedfe1eac4b19751eb3b4202a25db7ff5228f7fae5280bbe35c
Reporting entity
- Name
- Gustavo Prestonnorm: gustavo preston
- Domain
- gustavopreston.com
Victim entity
- Name
- Gustavo Prestonnorm: gustavo preston
- Domain
- gustavopreston.com
Incident
- Discovered
- Nov 21, 2025
- Materiality determined
- —
- Notification sent
- Dec 19, 2025
- Affected individuals
- 1
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Written notice provided to Maine Attorney General
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 28d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 21, 2025→ Filed with AG: Dec 19, 202528d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.