HackingVulnerability ExploitCustomer Data InvolvedData ExfiltratedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
SFERRA Fine Linens, LLC
bd_efe4f8655dd9e796 · schema v1 · pii pii-v1
Full breach record for SFERRA Fine Linens, LLC →SFERRA Fine Linens, LLC reported an external system breach (hacking) occurring between April 14 and April 24, 2022, discovered on July 8, 2022. The incident affected 914 individuals, including 83 Maine residents. Acquired data included names and financial account or credit/debit card numbers (with security codes/PINs). The company provided written notification on August 18, 2022, and offered 12 months of credit and identity monitoring through IDX.
Maine clockDiscovered Jul 8, 2022 → Filed with AG Aug 18, 202241d ⏱ ME AG >30d6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_06931afb80653e8cNew Hampshire State AGfiled 2022-08-22(4d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/11222cea-b77d-43f7-8166-579c2751cc4f.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 18, 2022
- Raw hash
- 19e44e5398edbd5c3610ffa469bbae7b8d67df317ea62a664d9d66ec49e78a43
Reporting entity
- Name
- SFERRA Fine Linens, LLCnorm: sferra fine linens
Victim entity
- Name
- SFERRA Fine Linens, LLCnorm: sferra fine linens
Incident
- Discovered
- Jul 8, 2022
- Materiality determined
- —
- Notification sent
- Aug 18, 2022
- Affected individuals
- 914
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 weeks(41 days from discovery to filing)
- Compliance flags
- ME AG >30d · 41d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 8, 2022→ Filed with AG: Aug 18, 202241d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.