DisclosureLens
HackingProfessional ServicesData ExfiltratedEmployee Data InvolvedIdentity (basic)Financial accountFinancial credentialsLow

Stephan Pelletier & Sons, Inc.

bd_d2b1fa755462c7d7 · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 23, 2022

Filed

Oct 14, 2022

To disclose

21 days

Affected

9state residents only

Confidence

50%
Full breach record for Stephan Pelletier & Sons, Inc. →2 incidents on file

Stephan Pelletier & Sons, Inc. experienced an external system breach on September 23, 2022, which was also the date of discovery. The breach affected 9 individuals, all of whom are Maine residents. The compromised information included names and financial account numbers or credit/debit card numbers with their corresponding security codes. The company notified the affected individuals on September 27, 2022, and offered one year of identity theft protection services.

Maine clockDiscovered Sep 23, 2022 → Filed with AG Oct 14, 202221d ✓ ME AG ≤30d21 days discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 21 days

Sep 23, 2022

Begins

Sep 23, 2022

Discovered

Oct 14, 2022

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed9 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.