HackingCustomer Data InvolvedPIILowContained
Station Casinos LLC
bd_f2aa91ade4b7de0a · schema v1 · pii pii-v1
Full breach record for Station Casinos LLC →Station Casinos LLC reported an external system breach (hacking) on March 5, 2026, affecting one Maine resident. The breach was discovered on the same date. The company notified the Maine Attorney General and provided written notification to the affected individual on May 21, 2026, along with 12 months of identity theft protection services.
Maine clockDiscovered Mar 5, 2026 → Filed with AG May 21, 202677d ⏱ ME AG >30d11 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_0e1a2fd3ce7b71f8Vermont State AGfiled 2026-05-21Verified
- bd_69bb9e3dba7b362dIndiana State AGfiled 2026-05-21Candidate
- bd_aca6948252489f91New Hampshire State AGfiled 2026-05-26(5d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b2fed8e3-69c7-432b-a6f7-33f715579484.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 21, 2026
- Raw hash
- 41a31833a4a87f444215f953c05e7236096fbf630f940318f63c04e491c80e42
Reporting entity
- Name
- Station Casinos LLCnorm: station casinos
Victim entity
- Name
- Station Casinos LLCnorm: station casinos
Incident
- Discovered
- Mar 5, 2026
- Materiality determined
- —
- Notification sent
- May 21, 2026
- Affected individuals
- 1
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 11 weeks(77 days from discovery to filing)
- Compliance flags
- ME AG >30d · 77dME resident >60d · 77d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 5, 2026→ Filed with AG: May 21, 202677d 30 days (soft) ME AG >30d Maine Discovered: Mar 5, 2026→ Notified: May 21, 202677d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.