HackingOtherCustomer Data InvolvedIdentity (basic)LowContained

Sauers Lopez Construction, Inc.

bd_e1bdc76ddc159a1d · schema v1 · pii pii-v1

Severity

Low

Discovered

May 29, 2025

Filed

Jul 22, 2025

To disclose

8 weeks

Affected · nationwide

4851 in this filing

Confidence

64%

Full breach record for Sauers Lopez Construction, Inc. →

Sauers Lopez Construction, Inc. reported unauthorized access to systems between May 22-30, 2024, discovered May 29, 2025. 485 individuals affected, including 1 Maine resident. Data involved names and other personal identifiers. The company engaged third-party specialists, secured systems, and offered 12 months of credit monitoring via IDX.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered May 29, 2025 → Filed with AG Jul 22, 202554d ⏱ ME AG >30d8 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 372 days

discovery → filing · 8 weeks / 54 days

May 22, 2024

Begins

May 29, 2025

Discovered

Jul 22, 2025

Filed

vs. sector median

+2 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed485 affectedView incident

Name: Cipriani & Werner
norm: cipriani werner
Domain: c-wlaw.com

Name: Sauers Lopez Construction, Inc.
norm: sauers lopez construction
Industry: Otherllm

Discovered: May 29, 2025
Breach occurred: May 22, 2024 – May 30, 2024
Undetected for: 372 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 21, 2025
Affected individuals: 485state + nationwide
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Filed notification with Maine Attorney General

During the incident: Engaged third-party specialists to assist with understanding the nature and scope of the disruption
Secured systems
Enhanced the security of the network
Arranged for complimentary credit monitoring and identity protection services
Changes made: Enhanced the security of the network to prevent similar incidents from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(54 days from discovery to filing)
Compliance flags: ME AG >30d · 54d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: May 29, 2025
→ Filed with AG: Jul 22, 2025
54d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: May 29, 2025 → Filed with AG: Jul 22, 2025	54d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/687e00c1-0616-4e78-b303-4fdb8d778454.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 22, 2025
Raw hash: be7b9443e3540984816ff3b1db15169580c2d6a88352d1c0f00af7bee0c96155

Reporting entityCipriani & Werner

Victim entitySauers Lopez Construction, Inc.

Incidentdiscovered May 29, 2025

Stated responseEngaged third-party specialists to assist with understanding the nature and scope of the disruption

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov