DisclosureLens
HackingFinanceCustomer Data InvolvedGovernment IDCritical

PAL Card Minnesota, LLC

bd_d5952e2686acb399 · schema v1 · pii pii-v1

Severity

Critical

Discovered

Oct 3, 2021

Filed

Nov 19, 2021

To disclose

7 weeks

Affected · nationwide

166,689106 in this filing

Linked

6 filings

Confidence

50%
Full breach record for PAL Card Minnesota, LLC →

PAL Card Minnesota, LLC reported a data breach to the Maine Attorney General, stating that an external system breach (hacking) occurred on September 28, 2021. The breach was discovered on October 3, 2021. The compromised information includes names and Driver's License or Non-Driver Identification Card Numbers. The incident affected 106 Maine residents, who were notified on November 19, 2021.

Maine clockDiscovered Oct 3, 2021 → Filed with AG Nov 19, 202147d ⏱ ME AG >30d7 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 5 days
discovery → filing · 7 weeks / 47 days

Sep 28, 2021

Begins

Oct 3, 2021

Discovered

Nov 19, 2021

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filing ↓up to 322d gap

Filing propagation · 6 filings · 6 states

View merged incident ↗
Illinois State AGJan 1 · first
California State AG+322d
Indiana State AG+322d
Maine State AG+322d · this page
Oregon State AG+325d
South Carolina State AG+347d

Pattern: first filing Jan 1 (IL), last Dec 14 (SC) — a 347-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.