DisclosureLens
HackingCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDEmploymentFinancial accountHealth (basic)MediumContained

MAX USA Corp.

bd_d7f76c6a659b0c5b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 13, 2026

Filed

Feb 18, 2026

To disclose

5 weeks

Affected

Not disclosed

Linked

5 filings

Confidence

64%
Full breach record for MAX USA Corp.

MAX USA CORP. experienced unauthorized access to its network environment between January 11 and January 13, 2026. The company became aware of suspicious activity on January 13, 2026. An unauthorized third party accessed business and employment records, potentially including names, dates of birth, Social Security numbers, driver's license numbers, contact information, payroll, tax withholding, direct-deposit, benefit enrollment, and health insurance information. The company contained the incident, engaged forensic specialists, and is offering identity theft protection services.

Leak gap clock Leak >180d5 weeks discovery → filing

Incident timeline

undetected · 2 days
discovery → filing · 5 weeks / 36 days

Jan 11, 2026

Begins

Jan 13, 2026

Discovered

Feb 18, 2026

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (2)

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
Nebraska State AGJan 15 · first
Massachusetts State AG+34d · this page

Pattern: first filing Jan 15 (NE), last Feb 20 (NH) — a 36-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.