HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedDelayed DiscoveryPIILowResolved
PMA Consultants
bd_e55973011bb404be · schema v1 · pii pii-v1
Full breach record for PMA Consultants →PMA Consultants, a consulting firm based in Ann Arbor, MI, experienced an external system breach (hacking) between May 4–7, 2024. The breach was not discovered until December 23, 2024 — approximately seven months later. A total of 273 individuals were affected nationwide, including 4 Maine residents. Affected individuals were notified in writing on January 29, 2025, and offered 12 months of complimentary credit monitoring and identity protection services through Cyberscout (TransUnion).
Maine clockDiscovered Dec 23, 2024 → Filed with AG Jan 30, 202538d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_fee1b469d6f3bacdNew Hampshire State AGfiled 2025-01-30Candidate
- bd_7b8da585f4ff4455Maine State AGfiled 2025-03-17(46d gap)Verified
- bd_7d2860b96ee0522aNew Hampshire State AGfiled 2025-03-17(46d gap)Verified
- bd_93723ad4fd281834Indiana State AGfiled 2025-03-17(46d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 46d gap
- bd_fd0865727c08d584Maryland State AGfiled 2025-03-17(46d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/8963ace5-7054-47e7-acb8-bdae94ba7f47.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 30, 2025
- Raw hash
- f4b1f73464a4398a793e2a3f40c1daf527c3745617e3fce9b1a3f20c2f99816a
Reporting entity
- Name
- PMA Consultantsnorm: pma consultants
Victim entity
- Name
- PMA Consultantsnorm: pma consultants
- Industry
- Other Commercial
- Industry
- Professional Servicesllm
Incident
- Discovered
- Dec 23, 2024
- Materiality determined
- —
- Notification sent
- Jan 29, 2025
- Affected individuals
- 4
- Data types
- PII
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 5 weeks(38 days from discovery to filing)
- Compliance flags
- ME AG >30d · 38d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 23, 2024→ Filed with AG: Jan 30, 202538d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.