HackingTechnologyInformationCustomer Data InvolvedIdentity (basic)Government IDHighContained

Data Systems Analysts, Inc.

bd_cf8106e9c7fbb8ae · schema v1 · pii pii-v1

Severity

High

Discovered

Sep 11, 2025

Filed

Feb 24, 2026

To disclose

24 weeks

Affected · nationwide

3,2393 in this filing

Linked

6 filings

Confidence

66%

Full breach record for Data Systems Analysts, Inc. →2 incidents on file

Data Systems Analysts, Inc. reported an external system breach (hacking) on September 11, 2025, affecting 3,239 individuals nationwide, including 3 Maine residents. The incident involved unauthorized access to personal information such as names and government identifiers. The company notified affected individuals on February 6, 2026, and provided 12 months of credit monitoring services through Experian.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Sep 11, 2025 → Filed with AG Feb 24, 2026166d ✗ ME AG >90d24 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 24 weeks / 166 days

Sep 11, 2025

Begins

Sep 11, 2025

Discovered

Feb 24, 2026

Filed

vs. sector median

+5 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

New Hampshire State AGbd_6adeca866241989b2026-02-24Verified
Massachusetts State AGbd_aa23a8fd526d56bd2026-02-25 · +1dVerified
Texas State AGbd_f272e4565d15a1e22026-02-27 · +3dVerified
Indiana State AGbd_5378ad3e267e989d2026-02-06 · +18dCandidate

Show 1 more filing ↓up to 18d gap

Nebraska State AGbd_e865086c6ddade592026-02-06 · +18dVerified

Name: Pierson Ferdinand LLP
norm: pierson ferdinand
Domain: pierferd.com

Name: Data Systems Analysts, Inc.
norm: data systems analysts
Industry: Technologyllm

Discovered: Sep 11, 2025
Breach occurred: Sep 11, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 6, 2026
Affected individuals: 3,239state + nationwide
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Filed notification with Maine Attorney General
Initial access: exploit_public_facing

During the incident: Offering 12 months of credit monitoring from Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 24 weeks(166 days from discovery to filing)
Compliance flags: ME AG >90d · 166dME resident >60d · 148d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Sep 11, 2025
→ Filed with AG: Feb 24, 2026
166d 90 days ME AG >90d
Maine
Discovered: Sep 11, 2025
→ Notified: Feb 6, 2026
148d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Sep 11, 2025 → Filed with AG: Feb 24, 2026	166d	90 days	ME AG >90d
Maine	Discovered: Sep 11, 2025 → Notified: Feb 6, 2026	148d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Indiana State AGFeb 6 · first

Nebraska State AGFeb 6 · first

New Hampshire State AG+18d

Maine State AG+18d · this page

Massachusetts State AG+19d

Texas State AG+21d

Pattern: first filing Feb 6 (IN), last Feb 27 (TX) — a 21-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/9381c2f2-0aa0-482d-aaaf-7a128ef25575.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 24, 2026
Raw hash: 6cb19f54df6ed57377525c0cb0fb2740680ac88e58350c716cdb05c4bd1a2839

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityPierson Ferdinand LLP

Victim entityData Systems Analysts, Inc.

Incidentdiscovered Sep 11, 2025

Stated responseOffering 12 months of credit monitoring from Experian

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov