HackingCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowResolved
ANDREWS MCMEEL UNIVERSAL
bd_e6d12835c087df6f · schema v1 · pii pii-v1
Full breach record for ANDREWS MCMEEL UNIVERSAL →Andrews McMeel Universal, a commercial organization, reported an external system breach that occurred on November 17, 2022, and was discovered on February 20, 2023. The breach impacted a total of 2,420 individuals, with 9 of them being Maine residents. The compromised data included names combined with financial account numbers or credit/debit card numbers along with their security codes, access codes, passwords, or PINs. Affected consumers were notified in writing on March 22, 2023, and were offered 12 months of credit monitoring services from IDX.
Maine clockDiscovered Feb 20, 2023 → Filed with AG Mar 22, 202330d ✓ ME AG ≤30d4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_8a181b57cb17b486New Hampshire State AGfiled 2023-03-22Verified
- bd_8cdbc5d9f8ed62f6Montana State AGfiled 2023-03-22Verified
- bd_964ef63b17930bd4New Hampshire State AGfiled 2023-01-25(56d gap)Verified
- bd_ea47cf7ddeffad26Maine State AGfiled 2023-01-23(58d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/408336b4-07f1-4220-aa36-433a303fc679.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 22, 2023
- Raw hash
- d21f6372bea722d216256f1fdd84106e37576bfceefdfc61a2b5706c88a3b73d
Reporting entity
- Name
- ANDREWS MCMEEL UNIVERSALnorm: andrews mcmeel universal
Victim entity
- Name
- ANDREWS MCMEEL UNIVERSALnorm: andrews mcmeel universal
Incident
- Discovered
- Feb 20, 2023
- Materiality determined
- —
- Notification sent
- Mar 22, 2023
- Affected individuals
- 9
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 20, 2023→ Filed with AG: Mar 22, 202330d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.