HackingCustomer Data InvolvedLowContained
Payactiv
bd_cba3b5443bba44b3 · schema v1 · pii pii-v1
Full breach record for Payactiv →Payactiv, Inc. disclosed a data breach affecting 118 Maine residents. The breach, an external system hack, occurred between April and August 2025 and was discovered in September 2025. The company notified affected individuals and offered one year of credit monitoring and identity theft protection services through Epiq.
Maine clockDiscovered Sep 12, 2025 → Filed with AG Oct 11, 202529d ✓ ME AG ≤30d29 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 9 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- bd_384bdccd7645f4e1Washington State AGfiled 2025-10-11Verified by operator
- bd_3ce26a4c298b1b78Oregon State AGfiled 2025-10-11Verified by operator
- bd_f8b2d1de52f6d894California State AGfiled 2025-10-11Verified
- bd_3157c62a8df34b92Vermont State AGfiled 2025-09-30(11d gap)Verified
Show 4 more filings ↓Show fewer ↑up to 88d gap
- bd_7e085442c1731a30New Hampshire State AGfiled 2025-09-29(12d gap)Verified
- bd_e3ea6aa0a8094db5Montana State AGfiled 2025-09-29(12d gap)Candidate
- bd_69970be9b9ebe336Indiana State AGfiled 2025-09-25(16d gap)Verified
- bd_e018df5178963fbcTexas State AGfiled 2026-01-07(88d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/8d80431c-c6ef-4bf1-9949-3200a370974c.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 11, 2025
- Raw hash
- d4e8ee21265de1262dbbb3704bed5740336fc17d56fd52e7e08862d88982585b
Reporting entity
- Name
- Payactivnorm: payactiv
- Domain
- payactivapp.com
Victim entity
- Name
- Payactivnorm: payactiv
- Domain
- payactivapp.com
Incident
- Discovered
- Sep 12, 2025
- Materiality determined
- —
- Notification sent
- Sep 29, 2025
- Affected individuals
- 118
- Data types
- —
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 29 days(29 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 29d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 12, 2025→ Filed with AG: Oct 11, 202529d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.