DisclosureLens
HackingFinanceHacking OtherCustomer Data InvolvedFinancial accountFinancial credentialsHigh

Transform SR Holding Management LLC

bd_dbf01f83561796b4 · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 24, 2021

Filed

Jul 26, 2021

To disclose

5 weeks

Affected

180,000scope not determined

Linked

7 filings

Confidence

50%
Full breach record for Transform SR Holding Management LLC →3 incidents on file

Transform SR Holding Management LLC reported a data breach to the Maine Attorney General, indicating that an external system breach (hacking) occurred between June 3 and June 15, 2021. The breach, discovered on June 24, 2021, affected approximately 180,000 individuals and compromised names or other personal identifiers in combination with financial account numbers or credit/debit card numbers, including security codes or PINs. The company provided substitute notice to affected consumers on July 26, 2021, and offered one year of credit monitoring and identity theft protection services through Kroll.

Maine clockDiscovered Jun 24, 2021 → Filed with AG Jul 26, 202132d ⏱ ME AG >30d5 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 21 days
discovery → filing · 5 weeks / 32 days

Jun 3, 2021

Begins

Jun 24, 2021

Discovered

Jul 26, 2021

Filed

This filing is one of 7 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Show 2 more filings ↓up to 1d gap

Filing propagation · 7 filings · 7 states

View merged incident ↗
Oregon State AGJul 26 · first
Massachusetts State AGJul 26 · first
New Hampshire State AGJul 26 · first
Washington State AGJul 26 · first
California State AGJul 26 · first
Maine State AGJul 26 · first · this page
South Carolina State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.