HackingStolen CredentialsCustomer Data InvolvedDelayed DiscoveryPIILowContained
Stewart Property Management, Inc.
bd_d325e5ef7613c93d · schema v1 · pii pii-v1
Full breach record for Stewart Property Management, Inc. →Stewart Property Management, Inc. (Bedford, NH) reported that an unauthorized person accessed an employee email account between December 3 and December 13, 2024. The breach was discovered on March 10, 2025. A review of the account contents identified individuals whose personal information was potentially at risk. 120 Maine residents were affected out of 2,628 total. Consumer notification was sent May 6, 2025. Cyberscout (TransUnion) credit monitoring services were offered.
Maine clockDiscovered Mar 10, 2025 → Filed with AG May 6, 202557d ⏱ ME AG >30d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_2b4b0fe2a8b1bf75Vermont State AGfiled 2025-05-06Verified
- bd_b78db25de731a8cdNew Hampshire State AGfiled 2025-05-12(6d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/fcdb27ff-da2b-45b6-99b9-4807ac10736a.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 6, 2025
- Raw hash
- a99b3a69a91dc4f6fe63adfbd6d9a188d856efc39e0a73982c81e583ee45caa5
Reporting entity
- Name
- Stewart Property Management, Inc.norm: stewart property management
- Industry
- Other Commercial
Victim entity
- Name
- Stewart Property Management, Inc.norm: stewart property management
- Industry
- Other Commercial
Incident
- Discovered
- Mar 10, 2025
- Materiality determined
- —
- Notification sent
- May 6, 2025
- Affected individuals
- 120
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 8 weeks(57 days from discovery to filing)
- Compliance flags
- ME AG >30d · 57d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 10, 2025→ Filed with AG: May 6, 202557d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.