DisclosureLens
HackingInformationCustomer Data InvolvedIdentity (basic)Government IDMediumResolved

Cleo Communications US, LLC

bd_d56adc1077d1836d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 8, 2023

Filed

Apr 14, 2023

To disclose

9 weeks

Affected · nationwide

6441 in this filing

Linked

4 filings

Confidence

50%
Full breach record for Cleo Communications US, LLC →

Cleo Communications US, LLC reported an external system breach that occurred on October 28, 2022, and was discovered on February 8, 2023. The breach affected 644 individuals in total, including one resident of Maine. The compromised information includes names and Social Security numbers. The company notified the affected individuals on April 13, 2023, and offered 24 months of credit monitoring and identity restoration services.

Maine clockDiscovered Feb 8, 2023 → Filed with AG Apr 14, 202365d ⏱ ME AG >30d9 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 103 days
discovery → filing · 9 weeks / 65 days

Oct 28, 2022

Begins

Feb 8, 2023

Discovered

Apr 14, 2023

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Filing propagation · 4 filings · 4 states

View merged incident ↗
Indiana State AGApr 14 · first
Massachusetts State AGApr 14 · first
Maine State AGApr 14 · first · this page
New Hampshire State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.