HackingCustomer Data InvolvedIDENTITY_BASICLowContained
VacPartsWarehouse.com LLC
bd_ea2e25270143213e · schema v1 · pii pii-v1
Full breach record for VacPartsWarehouse.com LLC →VacPartsWarehouse.com reported an external system breach (hacking) occurring between October 31, 2025, and December 12, 2025, discovered on April 22, 2026. The incident affected 238 Maine residents. The company provided written notification to affected individuals on May 20, 2026, but did not offer identity theft protection services.
Maine clockDiscovered Apr 22, 2026 → Filed with AG May 20, 202628d ✓ ME AG ≤30d28 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_53f4c2171b146fc2Oregon State AGfiled 2026-05-20Verified by operator
- bd_66ae80b7d6c35eebIndiana State AGfiled 2026-05-20Verified by operator
- bd_7fbc3cbc26c5d303New Hampshire State AGfiled 2026-05-20Verified
- bd_848c508797d33b75California State AGfiled 2026-05-20Verified by operator
Show 3 more filings ↓Show fewer ↑up to 19d gap
- bd_aef6f425d4eac0dbVermont State AGfiled 2026-05-20Verified
- bd_9b74cdc45209ca3bTexas State AGfiled 2026-05-22(2d gap)Verified by operator
- bd_00aed7ea2d6e27e5Massachusetts State AGfiled 2026-05-01(19d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/4fc577d0-396b-4855-a895-4f8f4e7f1f5d.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 20, 2026
- Raw hash
- 16bae7d286bc662d6ee5816c99bfc527408c4dc06bf490c805414434e594eefa
Reporting entity
- Name
- VacPartsWarehouse.com LLCnorm: vacpartswarehousecom
Victim entity
- Name
- VacPartsWarehouse.com LLCnorm: vacpartswarehousecom
Incident
- Discovered
- Apr 22, 2026
- Materiality determined
- —
- Notification sent
- May 20, 2026
- Affected individuals
- 238
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 28d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 22, 2026→ Filed with AG: May 20, 202628d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.