HackingCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Cardinal Logistics Management Corp.
bd_e6772ee799add6c6 · schema v1 · pii pii-v1
Full breach record for Cardinal Logistics Management Corp. →Cardinal Logistics Management Corp. reported an external system breach (hacking) occurring on October 20, 2020, discovered on February 9, 2021. The incident affected 24,640 individuals, including 129 Maine residents. Compromised data included names and financial account or credit/debit card numbers. The company provided written notification and offered 12 months of credit monitoring via TransUnion.
Maine clockDiscovered Feb 9, 2021 → Filed with AG Mar 2, 202121d ✓ ME AG ≤30d21 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed24,640 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f69fef82-4407-4c48-8bcc-f6fdfec8c395.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 2, 2021
- Raw hash
- e4ea0637aad8e0c5260a5b2da40850ae2336439632c87f81760e7443ae274621
Reporting entity
- Name
- Cardinal Logistics Management Corp.norm: cardinal logistics management
- Domain
- cardlog.com
Victim entity
- Name
- Cardinal Logistics Management Corp.norm: cardinal logistics management
- Domain
- cardlog.com
Incident
- Discovered
- Feb 9, 2021
- Materiality determined
- —
- Notification sent
- Mar 2, 2021
- Affected individuals
- 24,640
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 21 days(21 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 21d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 9, 2021→ Filed with AG: Mar 2, 202121d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.