HackingTechnologyInformationData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountFinancial credentialsHealth (basic)PHIHighContained

VECTOR SECURITY, INC.

bd_cb16e052ad7341c3 · schema v1 · pii pii-v1

Severity

High

Discovered

Dec 18, 2024

Filed

Aug 1, 2025

To disclose

32 weeks

Affected · nationwide

30,282134 in this filing

Linked

7 filings

Confidence

66%

Full breach record for VECTOR SECURITY, INC. →3 incidents on file

Vector Security, Inc. reported an external system breach (hacking) occurring on December 17, 2024, discovered on December 18, 2024. The incident affected 30,282 individuals nationwide, including 134 Maine residents. Compromised data included names, SSNs, driver's licenses, credit/debit card numbers with security codes, tax IDs, and medical/health insurance information. Vector Security notified federal law enforcement, engaged cybersecurity specialists, and offered 12 months of credit monitoring and fraud assistance to affected individuals. Consumer notifications were sent on August 1, 2025.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Dec 18, 2024 → Filed with AG Aug 1, 2025226d ✗ ME AG >90d32 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 1 days

discovery → filing · 32 weeks / 226 days

Dec 17, 2024

Begins

Dec 18, 2024

Discovered

Aug 1, 2025

Filed

vs. sector median

+14 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Vermont State AGbd_0548aa5296b2b44a2025-08-01Verified
Massachusetts State AGbd_4970c62024f970d32025-08-01Verified
Indiana State AGbd_ae672ecb9a1d63cd2025-08-01Verified
New Hampshire State AGbd_e38ae76d117aecae2025-08-01Verified

Show 2 more filings ↓up to 3d gap

Nebraska State AGbd_f85a01b398a7d90f2025-08-01Verified
Texas State AGbd_6c8340ceb0a3330c2025-08-04 · +3dVerified

Name: VECTOR SECURITY, INC.
norm: vector security

Name: VECTOR SECURITY, INC.
norm: vector security
Industry: Technologyllm

Discovered: Dec 18, 2024
Breach occurred: Dec 17, 2024
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Aug 1, 2025
Affected individuals: 30,282state + nationwide
Data types: Identity (basic)Government IDFinancial accountFinancial credentialsHealth (basic)PHI
Data elements: Social Security numberMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified Maine Attorney General
Initial access: exploit_public_facing

During the incident: Took immediate protective actions to contain the activity
Notified U.S. federal law enforcement
Launched an investigation with the assistance of leading cybersecurity specialists
Retained industry-leading cybersecurity specialists to investigate the incident
Offered Single Bureau Credit Monitoring services at no charge for 12 months
Provided proactive fraud assistance through Cyberscout
Changes made: Ensured the unauthorized access ceased
Use lessons learned to improve systems’ security posture
Evaluate and deploy robust security protocols
Continuous monitoring
Staff training
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 32 weeks(226 days from discovery to filing)
Compliance flags: ME AG >90d · 226dME resident >60d · 226d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Dec 18, 2024
→ Filed with AG: Aug 1, 2025
226d 90 days ME AG >90d
Maine
Discovered: Dec 18, 2024
→ Notified: Aug 1, 2025
226d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Dec 18, 2024 → Filed with AG: Aug 1, 2025	226d	90 days	ME AG >90d
Maine	Discovered: Dec 18, 2024 → Notified: Aug 1, 2025	226d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Vermont State AGAug 1 · first

Massachusetts State AGAug 1 · first

Indiana State AGAug 1 · first

New Hampshire State AGAug 1 · first

Nebraska State AGAug 1 · first

Maine State AGAug 1 · first · this page

Texas State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/314ab0f7-d910-44a7-8a3e-a48cccdbd8fd.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 1, 2025
Raw hash: 57cdb994a6b61877ef3158cff48890073f9f764495d829c47eb845f47947c161

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityVECTOR SECURITY, INC.

Victim entityVECTOR SECURITY, INC.

Incidentdiscovered Dec 18, 2024

Stated responseTook immediate protective actions to contain the activity

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov