HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTPIIMediumContained
Penny Publications
bd_ee784c58ec87c8c7 · schema v1 · pii pii-v1
Full breach record for Penny Publications →Penny Publications LLC experienced an external system breach on August 3, 2023, which was also discovered on the same day. The incident compromised the names and Social Security numbers of 372 individuals, including 2 Maine residents. The company notified the affected individuals on November 3, 2023, and offered 24 months of identity protection services through Experian.
Maine clockDiscovered Aug 3, 2023 → Filed with AG Nov 6, 202395d ✗ ME AG >90d14 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
A leak claim by akira about this victim predates this filing by 70 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_81dd49200ac540a3Leak Siteakirafiled 2023-08-28(70d gap)Candidate
Regulatory filings (2) · sorted by filing gap
- bd_74bd6ca699e19159Montana State AGfiled 2023-11-06Verified by operator
- bd_b583173a30dd52faVermont State AGfiled 2023-11-03(3d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/26f57ed9-4270-481c-9361-0b06032154e3.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 6, 2023
- Raw hash
- ce4b048c99f3a595e9b00fc9d312296c2a410feab75fba5bd5e5b7bd16a608d6
Reporting entity
- Name
- Penny Publicationsnorm: penny publications
Victim entity
- Name
- Penny Publicationsnorm: penny publications
Incident
- Discovered
- Aug 3, 2023
- Materiality determined
- —
- Notification sent
- Nov 3, 2023
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPII
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 14 weeks(95 days from discovery to filing)
- Compliance flags
- ME AG >90d · 95dME resident >60d · 92dLeak >30d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 3, 2023→ Filed with AG: Nov 6, 202395d 90 days ME AG >90d Maine Discovered: Aug 3, 2023→ Notified: Nov 3, 202392d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.