HackingCustomer Data InvolvedMedium
Monro, Inc.
bd_eea3ee925e08d5fd · schema v1 · pii pii-v1
Full breach record for Monro, Inc. →Monro, Inc. reported a data breach to the Maine Attorney General, stating that an external system breach (hacking) occurred on November 21, 2024. The breach was discovered on November 29, 2024, and affected 1,434 Maine residents. The company began notifying affected individuals on March 21, 2025, and offered them 12 months of identity theft protection services through Experian IdentityWorks.
Maine clockDiscovered Nov 29, 2024 → Filed with AG Mar 25, 2025116d ✗ ME AG >90d17 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_098cf4205b448a91Vermont State AGfiled 2025-03-25Verified
- bd_688c27eeb1e682daNew Hampshire State AGfiled 2025-03-24(1d gap)Verified
- bd_3909ba1739d123c4Indiana State AGfiled 2025-03-21(4d gap)Verified
- bd_81844f5cb8cb5b78Delaware State AGfiled 2025-03-21(4d gap)Verified
Show 2 more filings ↓Show fewer ↑up to 5d gap
- bd_f9efcb8fd813b56cCalifornia State AGfiled 2025-03-21(4d gap)Verified
- bd_597f39e11b1b7606Maryland State AGfiled 2025-03-20(5d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ec3e23fb-4981-43ed-be7d-7aedcac21775.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 25, 2025
- Raw hash
- 059ae1aacaf089d9ea4d526047ff4c128f73b9aba39322b0f99a16185569cada
Reporting entity
- Name
- Monro, Inc.norm: monro
Victim entity
- Name
- Monro, Inc.norm: monro
Incident
- Discovered
- Nov 29, 2024
- Materiality determined
- —
- Notification sent
- Mar 21, 2025
- Affected individuals
- 1,434
- Data types
- —
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 17 weeks(116 days from discovery to filing)
- Compliance flags
- ME AG >90d · 116dME resident >60d · 112d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 29, 2024→ Filed with AG: Mar 25, 2025116d 90 days ME AG >90d Maine Discovered: Nov 29, 2024→ Notified: Mar 21, 2025112d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.