HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
MAC Pizza Management, Inc
bd_e5edffcacbfdd786 · schema v1 · pii pii-v1
Full breach record for MAC Pizza Management, Inc →MAC Pizza Management, Inc. reported an external system breach (hacking) occurring on April 14, 2023, discovered on April 28, 2023. The incident compromised names and driver's license numbers of 39,854 individuals, including 6 Maine residents. Written notification was sent on July 7, 2023. No identity theft protection services were offered.
Maine clockDiscovered Apr 28, 2023 → Filed with AG Jul 7, 202370d ⏱ ME AG >30d10 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_01a464e5539cf4e2Montana State AGfiled 2023-07-07Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c493aef3-273c-45ad-8818-220d2cb3766d.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 7, 2023
- Raw hash
- 43a429aab36fe54faa8e5ee9b8d9312691fce84e9f8aaec45d5e19c4408e42e4
Reporting entity
- Name
- MAC Pizza Management, Incnorm: mac pizza management
Victim entity
- Name
- MAC Pizza Management, Incnorm: mac pizza management
Incident
- Discovered
- Apr 28, 2023
- Materiality determined
- —
- Notification sent
- Jul 7, 2023
- Affected individuals
- 39,854
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 10 weeks(70 days from discovery to filing)
- Compliance flags
- ME AG >30d · 70dME resident >60d · 70d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 28, 2023→ Filed with AG: Jul 7, 202370d 30 days (soft) ME AG >30d Maine Discovered: Apr 28, 2023→ Notified: Jul 7, 202370d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.