HackingCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTCREDENTIALSMediumContained
Valsoft Corporation Inc.
bd_e78901becd64e305 · schema v1 · pii pii-v1
Full breach record for Valsoft Corporation Inc. →Valsoft Corporation Inc. d/b/a AllTrust reported an external network breach affecting its subsidiary Aspire USA, LLC. An unauthorized actor accessed the network between February 12–15, 2024, and exfiltrated certain files. Aspire's security team interrupted an in-progress file transfer on February 14, 2024. Information potentially exposed includes names, Social Security numbers, driver's license numbers, and financial account information. 188 Maine residents were notified on February 27, 2025.
Maine clockDiscovered Feb 14, 2024 → Filed with AG Feb 27, 2025379d ✗ ME AG >90d13 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_33dcd03d26cdcefeMaryland State AGfiled 2025-02-27Candidate
- bd_4859b1729dbacf98Oregon State AGfiled 2025-02-27Verified
- bd_b79c2aca9da1c1e7New Hampshire State AGfiled 2025-02-27Verified
- bd_bb927d09f25ad525Indiana State AGfiled 2025-02-27Verified
Show 3 more filings ↓Show fewer ↑up to 68d gap
- bd_daba09a034e6a806Washington State AGfiled 2025-02-27Verified
- bd_f4848f23e5b232f9Montana State AGfiled 2025-02-27Verified
- bd_6f5bf1a82e506b15New Hampshire State AGfiled 2025-05-06(68d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ca8dde11-011d-4a5d-b088-30ad63339175.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 27, 2025
- Raw hash
- ef195a7f891edcfd28d137c7a76885bf69a09daa62cab0eea2eb2b4802d4bc52
Reporting entity
- Name
- Valsoft Corporation Inc.norm: valsoft
- Industry
- Other Commercial
Victim entity
- Name
- Valsoft Corporation Inc.norm: valsoft
- Industry
- Other Commercial
Incident
- Discovered
- Feb 14, 2024
- Materiality determined
- —
- Notification sent
- Feb 27, 2025
- Affected individuals
- 188
- Data types
- PIIIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 ChannelT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notification provided to Maine Attorney GeneralIncident reported to federal law enforcementNotification provided to Equifax, Experian, and TransUnion
- Third party
- via Aspire USA, LLCsubsidiary
Compliance
- Time to disclose
- 13 months(379 days from discovery to filing)
- Compliance flags
- ME AG >90d · 379dME resident >180d · 379d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 14, 2024→ Filed with AG: Feb 27, 2025379d 90 days ME AG >90d Maine Discovered: Feb 14, 2024→ Notified: Feb 27, 2025379d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.