HackingCustomer Data InvolvedLow
Velocity Risk Underwriters
bd_cf1decc7cfc0f317 · schema v1 · pii pii-v1
Full breach record for Velocity Risk Underwriters →Velocity Risk Underwriters, LLC reported a data breach to the Maine Attorney General, stating that an external system breach (hacking) occurred on March 17, 2025. The breach was discovered on the same day. 22 Maine residents were affected out of a total of 39,310 individuals. The company began notifying affected consumers in writing on September 3, 2025, and offered 12 months of complimentary credit monitoring services through IDX.
Maine clockDiscovered Mar 17, 2025 → Filed with AG Sep 4, 2025171d ✗ ME AG >90d24 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_2fcba4315454f903New Hampshire State AGfiled 2025-09-04Verified
- bd_640c7bbdabca27ccIndiana State AGfiled 2025-08-08(27d gap)Verified
- bd_3228d13e1b7bb975Texas State AGfiled 2025-07-28(38d gap)Verified by operator
- bd_925ef2c1c3de1907New Hampshire State AGfiled 2025-07-24(42d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b42d85ac-eb21-4a0c-bb88-88dfe9f1c2f6.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 4, 2025
- Raw hash
- 36f921c1a1a993049473c84e43195843d19d6e887a16c0964aa56708829a3d4f
Reporting entity
- Name
- Velocity Risk Underwritersnorm: velocity risk underwriters
Victim entity
- Name
- Velocity Risk Underwritersnorm: velocity risk underwriters
Incident
- Discovered
- Mar 17, 2025
- Materiality determined
- —
- Notification sent
- Sep 3, 2025
- Affected individuals
- 22
- Data types
- —
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 24 weeks(171 days from discovery to filing)
- Compliance flags
- ME AG >90d · 171dME resident >60d · 170d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 17, 2025→ Filed with AG: Sep 4, 2025171d 90 days ME AG >90d Maine Discovered: Mar 17, 2025→ Notified: Sep 3, 2025170d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.