HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Print Media Association

bd_ef390f3e96144bfc · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 5, 2025

Filed

Sep 10, 2025

To disclose

18 weeks

Affected

2state residents only

Linked

9 filings

Confidence

66%

Full breach record for Print Media Association →

Print Media Association reported unauthorized access to email accounts between May 1 and May 5, 2025, discovered on May 5, 2025. The incident affected 2 Maine residents, exposing names and Social Security numbers. The organization engaged outside professionals for investigation, contained the breach, and provided 12 months of Experian credit monitoring to affected individuals. Notification was sent on September 10, 2025.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered May 5, 2025 → Filed with AG Sep 10, 2025128d ✗ ME AG >90d18 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 4 days

discovery → filing · 18 weeks / 128 days

May 1, 2025

Begins

May 5, 2025

Discovered

Sep 10, 2025

Filed

vs. sector median

+1 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Texas State AGbd_47617c6f0d1502e82025-09-10Candidate
Vermont State AGbd_6de15f48884958de2025-09-10Verified
Massachusetts State AGbd_72732cb046c6b7422025-09-10Verified
Indiana State AGbd_7be46161eac2d2ed2025-09-10Verified

Show 4 more filings ↓up to 9d gap

New Hampshire State AGbd_887bf2e80a0a89132025-09-10Verified
California State AGbd_9e8e5545263fa5ac2025-09-10Verified
Nebraska State AGbd_a1f8a2857021015f2025-09-10Verified
Illinois State AGbd_6e02ae8d033228d52025-09-01 · +9dVerified

Name: Print Media Association
norm: print media
Domain: pmastl.org

Name: Print Media Association
norm: print media
Domain: pmastl.org
Industry: Professional Servicesllm

Discovered: May 5, 2025
Breach occurred: May 1, 2025 – May 5, 2025
Undetected for: 4 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 10, 2025
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Took prompt containment action
Initiated an investigation with the assistance of outside professionals
Notifying individuals whose personal information was identified in the documents involved
Changes made: Reviewing its policies and procedures in light of this event to help reduce the likelihood of a similar event occurring in the future
Offering access to credit monitoring services for twelve (12) months, through Experian
Providing impacted individuals with guidance on steps they can take to help protect against identity theft and fraud
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(128 days from discovery to filing)
Compliance flags: ME AG >90d · 128d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: May 5, 2025
→ Filed with AG: Sep 10, 2025
128d 90 days ME AG >90d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: May 5, 2025 → Filed with AG: Sep 10, 2025	128d	90 days	ME AG >90d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Illinois State AGSep 1 · first

Texas State AG+9d

Vermont State AG+9d

Massachusetts State AG+9d

Indiana State AG+9d

New Hampshire State AG+9d

California State AG+9d

Nebraska State AG+9d

Maine State AG+9d · this page

Pattern: first filing Sep 1 (IL), last Sep 10 (ME) — a 9-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/351bdb59-d241-425b-8183-1e28556dfd57.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 10, 2025
Raw hash: 5308dffd33df6f05d5eca481b030e4a5eff185369668a4ce927da9a8750463a5

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityPrint Media Association

Victim entityPrint Media Association

Incidentdiscovered May 5, 2025

Stated responseTook prompt containment action

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov