HackingProfessional ServicesCustomer Data InvolvedIdentity (basic)Government IDMediumResolved

Collins Electrical Construction Company

bd_cbcd41b623f44a03 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 18, 2023

Filed

May 17, 2023

To disclose

29 days

Affected · nationwide

5671 in this filing

Linked

3 filings

Confidence

50%

Full breach record for Collins Electrical Construction Company →

Collins Electrical Construction Company reported a data breach affecting one Maine resident. The breach, which occurred between March 1 and March 4, 2023, was discovered on April 18, 2023. An external system breach (hacking) resulted in the compromise of names and Social Security numbers. The company provided 12 months of credit monitoring services through Cyberscout.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Apr 18, 2023 → Filed with AG May 17, 202329d ✓ ME AG ≤30d29 days discovery → filing

⚠ notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.

Incident timeline

undetected · 48 days

discovery → filing · 29 days

Mar 1, 2023

Begins

Apr 18, 2023

Discovered

May 17, 2023

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Vermont State AGbd_74fbe37a10e6fbe22023-05-16 · +1dVerified
New Hampshire State AGbd_b04020f4c7233b512023-05-22 · +5dVerified

Name: Collins Electrical Construction Company
norm: collins electrical construction

Name: Collins Electrical Construction Company
norm: collins electrical construction

Discovered: Apr 18, 2023
Breach occurred: Mar 1, 2023 – Mar 4, 2023
Undetected for: 48 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 18, 2023
Affected individuals: 567state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access

Changes made: Offered 12 months of identity theft protection services via Cyberscout
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: ME AG ≤30d · 29d
Discovery-date grounding: notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Apr 18, 2023
→ Filed with AG: May 17, 2023
29d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Apr 18, 2023 → Filed with AG: May 17, 2023	29d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Vermont State AGMay 16 · first

Maine State AG+1d · this page

New Hampshire State AG+6d

Pattern: first filing May 16 (VT), last May 22 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/627c9917-9b12-4148-bee8-d844d79ac4af.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 17, 2023
Raw hash: ad2a67115be22c2b11431e8eb93b2027b14db2814913d99e8c44061f63f7b713

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityCollins Electrical Construction Company

Victim entityCollins Electrical Construction Company

Incidentdiscovered Apr 18, 2023

Stated responseOffered 12 months of identity theft protection services via Cyberscout

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov