HackingInformationData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDHighContained

Underwriters Laboratories Inc and UL Inc.

bd_e778abd556f6a6a9 · schema v1 · pii pii-v1

Severity

High

Discovered

Apr 25, 2021

Filed

May 26, 2021

To disclose

4 weeks

Affected · nationwide

5,99425 in this filing

Linked

4 filings

Confidence

65%

Full breach record for Underwriters Laboratories Inc and UL Inc. →

Underwriters Laboratories Inc. and UL Inc. reported an external system breach that occurred between October 17, 2020, and February 13, 2021. The incident was discovered on April 25, 2021. The breach affected 25 Maine residents, compromising their names and Social Security numbers. The company provided affected individuals with 24 months of complimentary credit monitoring and identity theft protection services through Experian.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Apr 25, 2021 → Filed with AG May 26, 202131d ⏱ ME AG >30d4 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 190 days

discovery → filing · 4 weeks / 31 days

Oct 17, 2020

Begins

Apr 25, 2021

Discovered

May 26, 2021

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

California State AGbd_7a538b20e4284cb12021-05-26Verified
Indiana State AGbd_4b6de57c21ec38042021-03-23 · +64dVerified
Massachusetts State AGbd_544afe42826e42752021-03-22 · +65dCandidate

Name: Underwriters Laboratories Inc and UL Inc.
norm: underwriters laboratories inc and ul

Name: Underwriters Laboratories Inc and UL Inc.
norm: underwriters laboratories inc and ul

Discovered: Apr 25, 2021
Breach occurred: Oct 17, 2020 – Feb 13, 2021
Undetected for: 190 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 24, 2021
Affected individuals: 5,994state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
Threat actor: External

During the incident: Provided 24 months of credit monitoring and identity theft protection services through Experian
Sent written notification to affected consumers
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(31 days from discovery to filing)
Compliance flags: ME AG >30d · 31d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Apr 25, 2021
→ Filed with AG: May 26, 2021
31d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Apr 25, 2021 → Filed with AG: May 26, 2021	31d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGMar 22 · first

Indiana State AG+1d

California State AG+65d

Maine State AG+65d · this page

Pattern: first filing Mar 22 (MA), last May 26 (ME) — a 65-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d606442f-7a11-4ff4-9366-34f3d52a5393.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 26, 2021
Raw hash: 3137b905712388eba30bde0c4b2f37b55556ca5df9eaa5493bcbd536f3a1dacf

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityUnderwriters Laboratories Inc and UL Inc.

Victim entityUnderwriters Laboratories Inc and UL Inc.

Incidentdiscovered Apr 25, 2021

Stated responseProvided 24 months of credit monitoring and identity theft protection services through Experian

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov