HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHighContained
Indastrial Acceptance Corporation
bd_db8fcb8b8729724b · schema v1 · pii pii-v1
Full breach record for Indastrial Acceptance Corporation →Industrial Acceptance Corporation, a financial services entity based in New Haven, CT, reported an external system breach (hacking) occurring on February 22, 2025, discovered on February 24, 2025. The incident affected 79,216 individuals, including 226 Maine residents. The breach involved the acquisition of personal identifiers and government IDs. The company provided written notification and offered 12 months of identity monitoring services through CyberSteward (TransUnion).
Maine clockDiscovered Feb 24, 2025 → Filed with AG May 29, 2026459d ✗ ME AG >90d15 months discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 4 about the same incident.View merged incident
A leak claim by akira about this victim predates this filing by 456 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_aa16cbe2fb05315dNew Hampshire State AGfiled 2026-05-28(1d gap)Verified
- bd_ab7b0ef963d42cb7Indiana State AGfiled 2026-05-28(1d gap)Verified
- bd_95d220c931e3ba95Vermont State AGfiled 2026-06-01(3d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c2a95af1-d639-45ab-ab0d-8dbefca3f72a.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 29, 2026
- Raw hash
- b54f375c32864bd5aed75bbc28fad3772aa8f718f56d540695c556efe7a49881
Reporting entity
- Name
- Indastrial Acceptance Corporationnorm: indastrial acceptance
- Domain
- iaccredit.com
- Industry
- Financial Services
Victim entity
- Name
- Indastrial Acceptance Corporationnorm: indastrial acceptance
- Domain
- iaccredit.com
- Industry
- Financial Services
Incident
- Discovered
- Feb 24, 2025
- Materiality determined
- —
- Notification sent
- May 28, 2026
- Affected individuals
- 79,216
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 15 months(459 days from discovery to filing)
- Compliance flags
- ME AG >90d · 459dME resident >180d · 458dLeak >180d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 24, 2025→ Filed with AG: May 29, 2026459d 90 days ME AG >90d Maine Discovered: Feb 24, 2025→ Notified: May 28, 2026458d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.