HackingVulnerability ExploitSupply Chain (3P Vendor)Data ExfiltratedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHigh
Halma plc
bd_de423852a76ad2a4 · schema v1 · pii pii-v1
Full breach record for Halma plc →Halma plc reported a data breach impacting 7,105 individuals due to a third-party vendor vulnerability. The incident occurred on May 27, 2023, and was discovered on June 8, 2023. The compromised data includes names and Social Security numbers. Affected individuals were notified on June 23, 2023, and offered 24 months of credit monitoring and identity restoration services from Experian.
Maine clockDiscovered Jun 8, 2023 → Filed with AG Jul 7, 202329d ✓ ME AG ≤30d29 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_460219805d057b65New Hampshire State AGfiled 2023-06-21(16d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f2162e3a-ea13-488f-b11f-55d71941ffd8.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 7, 2023
- Raw hash
- b239ebb7f19c5b578f0ac2b7f18554133eaca89c51b35d5bd7176781ae751cfc
Reporting entity
- Name
- Halma plcnorm: halma
Victim entity
- Name
- Halma plcnorm: halma
Incident
- Discovered
- Jun 8, 2023
- Materiality determined
- —
- Notification sent
- Jun 23, 2023
- Affected individuals
- 7,105
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- supply_chain
Compliance
- Time to disclose
- 29 days(29 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 29d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 8, 2023→ Filed with AG: Jul 7, 202329d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.