HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Emmi Roth USA, Inc
bd_ceeeaf3225fb12ba · schema v1 · pii pii-v1
Full breach record for Emmi Roth USA, Inc →Emmi Roth USA, Inc. reported an external system breach (hacking) on August 10, 2023, affecting 1,310 individuals, including 1 Maine resident. The breach compromised names and Social Security Numbers. The company notified affected individuals in writing on September 15, 2023, and provided 24 months of identity theft protection services through Equifax.
Maine clockDiscovered Aug 10, 2023 → Filed with AG Sep 14, 202335d ⏱ ME AG >30d5 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_50a9de32f814b09cMontana State AGfiled 2023-09-14Candidate
- bd_067d063c3638d016Vermont State AGfiled 2023-09-15(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c635ac82-93b6-4c42-8e88-7387b111478d.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 14, 2023
- Raw hash
- 9bd482421f77803ef50cdccaf20ff943de9cd38124ef0e1b723f0fb4511e4daf
Reporting entity
- Name
- Emmi Roth USA, Incnorm: emmi roth usa
Victim entity
- Name
- Emmi Roth USA, Incnorm: emmi roth usa
Incident
- Discovered
- Aug 10, 2023
- Materiality determined
- —
- Notification sent
- Sep 15, 2023
- Affected individuals
- 1,310
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 5 weeks(35 days from discovery to filing)
- Compliance flags
- ME AG >30d · 35d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 10, 2023→ Filed with AG: Sep 14, 202335d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.