HackingCustomer Data InvolvedIDENTITY_BASICLowContained
Conrad Capital Management, Inc.
bd_eea7ae16866245f7 · schema v1 · pii pii-v1
Full breach record for Conrad Capital Management, Inc. →Conrad Capital Management, Inc. reported an external system breach (hacking) occurring between November 11, 2025, and March 8, 2026, discovered on May 7, 2026. The incident affected 539 individuals, including 5 Maine residents. The breach involved the acquisition of names and personal identifiers. The company provided written notification and offered one year of credit monitoring and identity theft protection services through Kroll.
Leak gap clock⏱ Leak >30d13 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed539 affectedView incident
A leak claim by dragonforce about this victim predates this filing by 62 days.View originating leak claim
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/11d4e7d7-93af-43c8-a63a-d84b26d3668c.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 20, 2026
- Raw hash
- ea65a3d5a13e741c206f1099e41d758b0951f6a6022e80893fdfc3b81e951e0c
Reporting entity
- Name
- Conrad Capital Management, Inc.norm: conrad capital management
- Domain
- conradcapital.com
Victim entity
- Name
- Conrad Capital Management, Inc.norm: conrad capital management
- Domain
- conradcapital.com
Incident
- Discovered
- May 7, 2026
- Materiality determined
- —
- Notification sent
- May 20, 2026
- Affected individuals
- 539
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General's Office
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 13 days(13 days from discovery to filing)
- Compliance flags
- Leak >30dME AG ≤30d · 13d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 7, 2026→ Filed with AG: May 20, 202613d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.