HackingStolen CredentialsCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Conner Strong & Buckelew Companies, LLC
bd_dff756e1bb0e4c06 · schema v1 · pii pii-v1
Full breach record for Conner Strong & Buckelew Companies, LLC →Conner Strong & Buckelew reported a data breach affecting 15,064 individuals, including 13 Maine residents. The incident, occurring on March 30, 2022, and discovered on May 9, 2023, involved email credential compromise. The attacker acquired Social Security Numbers in combination with personal identifiers. The firm notified affected individuals in writing on June 26, 2023, and provided 12 months of Experian IdentityWorks.
Maine clockDiscovered May 9, 2023 → Filed with AG Jun 26, 202348d ⏱ ME AG >30d7 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed15,064 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/5400bd62-68bf-4f64-b4e4-a521060e659c.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 26, 2023
- Raw hash
- 6dd0694a56730738b8d5a6a51d1d0dd0324ea29d5f42a2a47efbd5f1b46d9691
Reporting entity
- Name
- Conner Strong & Buckelew Companies, LLCnorm: conner strong buckelew companies
Victim entity
- Name
- Conner Strong & Buckelew Companies, LLCnorm: conner strong buckelew companies
Incident
- Discovered
- May 9, 2023
- Materiality determined
- —
- Notification sent
- Jun 26, 2023
- Affected individuals
- 15,064
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 7 weeks(48 days from discovery to filing)
- Compliance flags
- ME AG >30d · 48d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 9, 2023→ Filed with AG: Jun 26, 202348d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.