HackingTechnologyInformationCapture Stored DataData ExfiltratedEmployee Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENTMediumContained
Unanet, Inc.
bd_ea53e44bdd112f87 · schema v1 · pii pii-v1
Full breach record for Unanet, Inc. →Unanet, Inc. (ERP/CRM software, Dulles VA) suffered an external breach via a third-party support tool (~March 14, 2025). An unauthorized party exfiltrated a file with employee PII including names, SSNs, addresses, DOB, and employment info. 962 total affected; 5 Maine residents. Customer environments unimpacted. Federal law enforcement notified. Kroll identity monitoring offered for 24 months.
Maine clockDiscovered Mar 24, 2025 → Filed with AG Apr 17, 202524d ✓ ME AG ≤30d24 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_6a1c2f4708856222Indiana State AGfiled 2025-04-16(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0186ddd3-0d45-47c4-b723-701f1a5dc468.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 17, 2025
- Raw hash
- 13a190b691a93350fb1372e9d317922bca613350c8241103235037eb892b6d9d
Reporting entity
- Name
- Unanet, Inc.norm: unanet
- Domain
- unanet.com
- Industry
- Enterprise Resource Planning / CRM Software
Victim entity
- Name
- Unanet, Inc.norm: unanet
- Domain
- unanet.com
- Industry
- Enterprise Resource Planning / CRM Software
- Industry
- Technologyllm
Incident
- Discovered
- Mar 24, 2025
- Materiality determined
- Mar 24, 2025
- Notification sent
- Apr 16, 2025
- Affected individuals
- 5
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Federal law enforcement notified
Compliance
- Time to disclose
- 24 days(24 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 24d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 24, 2025→ Filed with AG: Apr 17, 202524d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.