HackingCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumContained
cgm
bd_c89272bb6194d4ae · schema v1 · pii pii-v1
Full breach record for cgm →CGM, Inc. experienced an external system breach that occurred on December 15, 2022, and was discovered on May 18, 2023. The breach compromised names combined with driver's license or non-driver identification card numbers. CGM notified affected individuals on June 7, 2023, and offered 12 months of complimentary credit monitoring services through TransUnion.
Leak gap clock✗ Leak >180d20 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
A leak claim by lockbit2 about this victim predates this filing by 465 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_1a2025acb7c94a97Oregon State AGfiled 2023-06-07Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/fdc0a65c-9a4c-401a-b278-5a83284956c7.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 7, 2023
- Raw hash
- b06daae2687be8237b1d53bc38abbbed9919b089caa1766b23218082b489b72c
Reporting entity
- Name
- cgm
Victim entity
- Name
- cgm
Incident
- Discovered
- May 18, 2023
- Materiality determined
- —
- Notification sent
- Jun 7, 2023
- Affected individuals
- 1
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 20 days(20 days from discovery to filing)
- Compliance flags
- Leak >180dME AG ≤30d · 20d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 18, 2023→ Filed with AG: Jun 7, 202320d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.