HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedIdentity (basic)LowContained

PRESTIGE MAINTENANCE USA, LTD.

bd_f24fe53d76c0e4de · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 17, 2025

Filed

Jul 22, 2025

To disclose

27 weeks

Affected

Not disclosed

Linked

9 filings

Confidence

64%

Full breach record for PRESTIGE MAINTENANCE USA, LTD. →3 incidents on file

Prestige Maintenance USA notified the California Attorney General of a data security incident. The company detected unusual activity on January 17, 2025, and later determined that unauthorized access occurred to files containing names and other personal information. The company engaged independent experts and reported the incident to law enforcement. Affected individuals are offered complimentary identity monitoring services.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jan 17, 2025 → Notified Jul 22, 2025186d ✗ CA 60-day late27 weeks discovery → filing

Incident timeline

discovery → filing · 27 weeks / 186 days

Jan 17, 2025

Begins

Jan 17, 2025

Discovered

Jul 22, 2025

Filed

vs. sector median

+9 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Nebraska State AGbd_32ee38c1de358dc42025-07-22Verified
New Hampshire State AGbd_373a1718d95089902025-07-22Verified by operator
Iowa State AGbd_844de8b7bed672ce2025-07-22Verified
Indiana State AGbd_89a2a8916558168a2025-07-22Verified by operator

Show 4 more filings ↓up to 21d gap

Maine State AGbd_c0de7bc1ca1ed2972025-07-22Verified
Massachusetts State AGbd_1698503814af35972025-07-24 · +2dVerified
Texas State AGbd_2a89c2416d9135b02025-07-24 · +2dVerified
Illinois State AGbd_98a94576b132df5d2025-07-01 · +21dVerified

Name: PRESTIGE MAINTENANCE USA, LTD.
norm: prestige maintenance usa
Domain: prestigeusa.net

Name: PRESTIGE MAINTENANCE USA, LTD.
norm: prestige maintenance usa
Domain: prestigeusa.net
Industry: Professional Servicesllm

Discovered: Jan 17, 2025
Breach occurred: Jan 17, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 22, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unknown

During the incident: Engaged independent experts to assist
Reported the incident to law enforcement
Changes made: Offering 12/24 months of complimentary identity monitoring services through IDX
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 weeks(186 days from discovery to filing)
Compliance flags: CA 60-day late · 186dLeak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jan 17, 2025
→ Notified: Jul 22, 2025
186d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jan 17, 2025 → Notified: Jul 22, 2025	186d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Illinois State AGJul 1 · first

Nebraska State AG+21d

New Hampshire State AG+21d

Iowa State AG+21d

Indiana State AG+21d

Maine State AG+21d

California State AG+21d · this page

Massachusetts State AG+23d

Texas State AG+23d

Pattern: first filing Jul 1 (IL), last Jul 24 (TX) — a 23-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-605911
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 22, 2025
Raw hash: 242a7a56cf143235b65fd7b1c1b34031a93f07a392bfe77aa80f8ed41f18dd6b

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityPRESTIGE MAINTENANCE USA, LTD.

Victim entityPRESTIGE MAINTENANCE USA, LTD.

Incidentdiscovered Jan 17, 2025

Stated responseEngaged independent experts to assist

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov