HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
McGrath RentCorp
bd_d2568fd1a5bd577c · schema v1 · pii pii-v1
Full breach record for McGrath RentCorp →McGrath RentCorp reported an external system breach (hacking) occurring on July 17, 2021, discovered on November 15, 2021. The incident compromised the names and Social Security Numbers of 6,686 individuals, including 1 Maine resident. Notification was sent on December 15, 2021, offering 12 months of identity protection services including credit monitoring and dark web monitoring through IDX.
Maine clockDiscovered Nov 15, 2021 → Filed with AG Dec 15, 202130d ✓ ME AG ≤30d4 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_46ba1dbe610c3216Montana State AGfiled 2021-12-15Candidate
- bd_9601abb2008ff6abCalifornia State AGfiled 2021-12-15Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/aae2190a-738e-4b93-884a-cb521dccd6fd.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 15, 2021
- Raw hash
- fe6a7d72081fcf970ed8e75ad7170a16dc18b8bec9cd49c8c7d09e062976ea32
Reporting entity
- Name
- McGrath RentCorpnorm: mcgrath rentcorp
Victim entity
- Name
- McGrath RentCorpnorm: mcgrath rentcorp
Incident
- Discovered
- Nov 15, 2021
- Materiality determined
- —
- Notification sent
- Dec 15, 2021
- Affected individuals
- 6,686
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 30d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 15, 2021→ Filed with AG: Dec 15, 202130d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.