HackingCustomer Data InvolvedPIIIDENTITY_GOVERNMENTHighContained
ANDREWS MCMEEL UNIVERSAL
bd_ea47cf7ddeffad26 · schema v1 · pii pii-v1
Full breach record for ANDREWS MCMEEL UNIVERSAL →Andrews McMeel Universal reported an external system breach (hacking) occurring on November 17, 2022, discovered on January 4, 2023. The incident compromised names and Social Security Numbers of 1,267 individuals, including 5 Maine residents. The company provided written notification and offered 12 months of credit monitoring services through IDX.
Maine clockDiscovered Jan 4, 2023 → Filed with AG Jan 23, 202319d ✓ ME AG ≤30d19 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_964ef63b17930bd4New Hampshire State AGfiled 2023-01-25(2d gap)Verified
- bd_8a181b57cb17b486New Hampshire State AGfiled 2023-03-22(58d gap)Verified
- bd_8cdbc5d9f8ed62f6Montana State AGfiled 2023-03-22(58d gap)Verified
- bd_e6d12835c087df6fMaine State AGfiled 2023-03-22(58d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/00f7f63f-7b99-462c-8b18-fad916bdbb66.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 23, 2023
- Raw hash
- dc10bc1fd166c616786adbc36a45c757d474ec2cf5fcd787e562b7e5cc09fc00
Reporting entity
- Name
- ANDREWS MCMEEL UNIVERSALnorm: andrews mcmeel universal
Victim entity
- Name
- ANDREWS MCMEEL UNIVERSALnorm: andrews mcmeel universal
Incident
- Discovered
- Jan 4, 2023
- Materiality determined
- —
- Notification sent
- Jan 25, 2023
- Affected individuals
- 1,267
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 19 days(19 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 19d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 4, 2023→ Filed with AG: Jan 23, 202319d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.