HackingCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Grayback Forestry, Inc.
bd_d3cb59520dcc2467 · schema v1 · pii pii-v1
Full breach record for Grayback Forestry, Inc. →On January 5-6, 2026, an unauthorized actor accessed Grayback Forestry, Inc. computer systems and likely copied files containing name and Social Security numbers. The breach was discovered on January 6, 2026, and a file review concluded February 20, 2026. Four Maine residents were affected. Written notice was sent March 13, 2026. CyEx Financial Shield Complete credit monitoring (24 months) was offered to affected individuals.
Maine clockDiscovered Jan 6, 2026 → Filed with AG Mar 13, 202666d ⏱ ME AG >30d9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_45c1d7c376d3035fIndiana State AGfiled 2026-03-13Candidate
- bd_55c1f684769403ceNew Hampshire State AGfiled 2026-03-13Verified
- bd_b403ba59bc15a80fVermont State AGfiled 2026-03-13Verified
- bd_e8a2844805c6c814Oregon State AGfiled 2026-03-13Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/fec568b2-e731-4877-a361-302f19a6275f.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 13, 2026
- Raw hash
- 122057eb48fc006732b4a3425542b25cdc36592ed99924769a7a99ff6f219b0e
Reporting entity
- Name
- Grayback Forestry, Inc.norm: grayback forestry
- Industry
- Other Commercial
Victim entity
- Name
- Grayback Forestry, Inc.norm: grayback forestry
- Industry
- Other Commercial
Incident
- Discovered
- Jan 6, 2026
- Materiality determined
- Feb 20, 2026
- Notification sent
- Mar 13, 2026
- Affected individuals
- 4
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notice provided to relevant state and federal regulators, as necessary, and to the three major credit reporting agencies (Experian, Equifax, TransUnion).
Compliance
- Time to disclose
- 9 weeks(66 days from discovery to filing)
- Compliance flags
- ME AG >30d · 66dME resident >60d · 66d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 6, 2026→ Filed with AG: Mar 13, 202666d 30 days (soft) ME AG >30d Maine Discovered: Jan 6, 2026→ Notified: Mar 13, 202666d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.