HackingCustomer Data InvolvedData ExfiltratedDelayed DiscoveryIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSPCILow
CBD Industries, LLC
bd_cfe47b89d7cd269e · schema v1 · pii pii-v1
Full breach record for CBD Industries, LLC →CBD Industries, LLC experienced an external system breach between March and May 2020, discovered on August 26, 2020. The breach affected 42,694 individuals, including 192 Maine residents. The compromised information included names and financial account or credit/debit card numbers with their corresponding security codes, access codes, or PINs. The company notified affected individuals and offered 12 months of identity monitoring services through TransUnion.
Maine clockDiscovered Aug 26, 2020 → Filed with AG Sep 29, 202034d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_7676897cc0117b01California State AGfiled 2020-09-29Verified
- bd_9ce793b7916c91e2Montana State AGfiled 2020-09-29Candidate
- bd_b6276c25cc19296bOregon State AGfiled 2020-09-29Verified
- bd_be79ead0dc0a32b6Washington State AGfiled 2020-09-29Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ddf5ab94-446f-48c3-b842-86e71f044aef.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 29, 2020
- Raw hash
- f3d704615cc1be5d63147d5398a47ab60927fe03594c5c9cc65c5c032d2be0d8
Reporting entity
- Name
- CBD Industries, LLCnorm: cbd industries
Victim entity
- Name
- CBD Industries, LLCnorm: cbd industries
Incident
- Discovered
- Aug 26, 2020
- Materiality determined
- —
- Notification sent
- Sep 28, 2020
- Affected individuals
- 192
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSPCI
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 5 weeks(34 days from discovery to filing)
- Compliance flags
- ME AG >30d · 34d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 26, 2020→ Filed with AG: Sep 29, 202034d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.