HackingCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
ESO Solutions, Inc.
bd_e9eeb2f06070791f · schema v1 · pii pii-v1
Full breach record for ESO Solutions, Inc. →ESO Solutions Inc. reported a data breach that affected approximately 2.7 million individuals, including 499 residents of Maine. The breach was an external system hacking incident that occurred and was discovered on September 28, 2023. The compromised information includes names and Social Security Numbers. ESO Solutions began notifying affected individuals by mail on March 1, 2024, and is offering 12 months of credit monitoring services through Kroll.
Maine clockDiscovered Sep 28, 2023 → Filed with AG Apr 9, 2024194d ✗ ME AG >90d28 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_c4bb84100b37655fNew Hampshire State AGfiled 2024-04-15(6d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ea23ab05-1d79-4b98-908a-296f91565470.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 9, 2024
- Raw hash
- a24b91f8dc693a2529497b01d2a37fb555b775e688e089577532b5dece698ab5
Reporting entity
- Name
- ESO Solutions, Inc.norm: eso solutions
Victim entity
- Name
- ESO Solutions, Inc.norm: eso solutions
Incident
- Discovered
- Sep 28, 2023
- Materiality determined
- —
- Notification sent
- Mar 1, 2024
- Affected individuals
- 499
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 28 weeks(194 days from discovery to filing)
- Compliance flags
- ME AG >90d · 194dME resident >60d · 155d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 28, 2023→ Filed with AG: Apr 9, 2024194d 90 days ME AG >90d Maine Discovered: Sep 28, 2023→ Notified: Mar 1, 2024155d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.