HackingCustomer Data InvolvedLow
NAHGA Claims Services
bd_e789820b3e42fdeb · schema v1 · pii pii-v1
Full breach record for NAHGA Claims Services →NAHGA Claims Services, a commercial entity, experienced an external system breach (hacking) between April 8, 2025, and April 11, 2025. The breach was discovered on October 17, 2025, and affected 5,072 individuals, including 176 Maine residents. In response, the company provided written notification to affected consumers on November 14, 2025, and offered 12 months of identity theft protection services through IDX, including credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed identity theft recovery services.
Maine clockDiscovered Oct 17, 2025 → Filed with AG Nov 17, 202531d ⏱ ME AG >30d4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_3f17cde947632955New Hampshire State AGfiled 2025-12-12(25d gap)Verified
- bd_7751d3f04a138101South Carolina State AGfiled 2025-12-12(25d gap)Verified
- bd_56c28fd2b98df649Vermont State AGfiled 2025-12-15(28d gap)Verified
- bd_a48a5bd5ccec93d8California State AGfiled 2025-12-15(28d gap)Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/db3dde1c-56fd-4e59-ba40-7b5b40441ef4.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 17, 2025
- Raw hash
- f3186397a975292e9f76ccb53831a1244bd9a9b7c01ae552e4af3dd11c3364db
Reporting entity
- Name
- NAHGA Claims Servicesnorm: nahga claims
Victim entity
- Name
- NAHGA Claims Servicesnorm: nahga claims
Incident
- Discovered
- Oct 17, 2025
- Materiality determined
- —
- Notification sent
- Nov 14, 2025
- Affected individuals
- 176
- Data types
- —
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 4 weeks(31 days from discovery to filing)
- Compliance flags
- ME AG >30d · 31d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 17, 2025→ Filed with AG: Nov 17, 202531d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.