HackingOtherData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHighContained

Cool Wind Ventilation

bd_dd8d67cbb4eeb14d · schema v1 · pii pii-v1

Severity

High

Discovered

Aug 29, 2025

Filed

Nov 20, 2025

To disclose

12 weeks

Affected · nationwide

1,4041 in this filing

Linked

2 records

Confidence

66%

Full breach record for Cool Wind Ventilation →

Cool Wind Ventilation Corp. reported an external system breach (hacking) on August 26, 2025, discovered on August 29, 2025. The incident affected 1,404 individuals nationwide, including 1 Maine resident. Compromised data included names, SSNs, driver's license numbers, and bank account/routing numbers. The company engaged forensic specialists, notified the FBI, rebuilt affected systems, and provided 12 months of credit monitoring services to affected individuals.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Aug 29, 2025 → Filed with AG Nov 20, 202583d ⏱ ME AG >30d12 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 3 days

discovery → filing · 12 weeks / 83 days

Aug 26, 2025

Begins

Aug 29, 2025

Discovered

Nov 20, 2025

Filed

vs. sector median

+6 wks slower

This filing is one of 2 records about the same incident.View merged incident

A leak claim by play about this victim was first seen 72 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteplaybd_0a35e6eaa39e9a862025-08-26 · +86dVerified by operator

Name: Lewis Brisbois Bisgaard & Smith, PLLC
norm: lewis brisbois bisgaard smith

Name: Cool Wind Ventilation
norm: cool wind ventilation
Domain: coolwind.biz
Industry: Otherllm

Discovered: Aug 29, 2025
Breach occurred: Aug 26, 2025
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 20, 2025
Affected individuals: 1,404state + nationwide
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified the FBI and is fully cooperating with their investigation
Initial access: exploit_public_facing

During the incident: Engaged third-party forensic specialists to assist with securing the network environment and investigating the extent of any unauthorized activity
Notified the FBI and is fully cooperating with their investigation
Wiped and rebuilt affected systems
Took steps to bolster network security
Providing 12 months of single bureau credit monitoring/single bureau credit report/single bureau credit score services through TransUnion
Providing proactive fraud assistance through Cyberscout
Changes made: Wiped and rebuilt affected systems
Reviewed and altered policies, procedures, and network security software relating to the security of systems and servers
Improved how data is stored and managed
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(83 days from discovery to filing)
Compliance flags: ME AG >30d · 83dLeak >30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Aug 29, 2025
→ Filed with AG: Nov 20, 2025
83d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Aug 29, 2025 → Filed with AG: Nov 20, 2025	83d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/039e4b57-7329-4cb6-80d5-8f81786aaf22.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 20, 2025
Raw hash: 454805dbc9ab0b73db3460b28da0ccce01702e5198ada5ecf56d8832721e86e2

Linked disclosures

Ransomware claims (1)

Reporting entityLewis Brisbois Bisgaard & Smith, PLLC

Victim entityCool Wind Ventilation

Incidentdiscovered Aug 29, 2025

Stated responseEngaged third-party forensic specialists to assist with securing the network environment and investigating the extent of any unauthorized activity

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov