HackingSupply Chain (3P Vendor)Customer Data InvolvedFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowResolved
SERRV International
bd_ed8988c26ba5160a · schema v1 · pii pii-v1
Full breach record for SERRV International →SERRV International, a non-profit organization, reported a data breach affecting 157 Maine residents due to an incident at its third-party vendor, CommerceV3. The breach occurred between November 24, 2021, and December 14, 2022, and was discovered on July 17, 2023. The compromised information includes financial account numbers or credit/debit card numbers along with their security codes, access codes, passwords, or PINs. Customers were notified on August 25, 2023.
Maine clockDiscovered Jul 17, 2023 → Filed with AG Aug 29, 202343d ⏱ ME AG >30d6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_08ffdb5fb7d5760dNew Hampshire State AGfiled 2023-08-29Verified
- bd_c0397a66ed1f65a3Washington State AGfiled 2023-08-29Candidate
- bd_c3a7e9d559999fc5Oregon State AGfiled 2023-08-29Verified
- bd_17e5ef2969179386California State AGfiled 2023-08-28(1d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 1d gap
- bd_dfb5cf626154740cMontana State AGfiled 2023-08-28(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/9bcd878d-6f5f-457b-a2dc-dcbc5475ed0e.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 29, 2023
- Raw hash
- 7ca72f974c066dd6d7f823052b2714c6644a9eec87ce1efb83b9816f391d0c5a
Reporting entity
- Name
- SERRV Internationalnorm: serrv international
- Domain
- serrv.org
Victim entity
- Name
- SERRV Internationalnorm: serrv international
- Domain
- serrv.org
Incident
- Discovered
- Jul 17, 2023
- Materiality determined
- —
- Notification sent
- Aug 25, 2023
- Affected individuals
- 157
- Data types
- FINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Third-Party / Supply Chain
Compliance
- Time to disclose
- 6 weeks(43 days from discovery to filing)
- Compliance flags
- ME AG >30d · 43d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 17, 2023→ Filed with AG: Aug 29, 202343d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.