HackingCustomer Data InvolvedIDENTITY_BASICLowContained
Hank’s Furniture, Inc.
bd_f6275d57d66db072 · schema v1 · pii pii-v1
Full breach record for Hank’s Furniture, Inc. →Hank’s Furniture, Inc. reported an external system breach (hacking) occurring on January 7, 2026, discovered on April 13, 2026. The incident affected 4 Maine residents. The company notified affected individuals in writing on May 15, 2026, and provided 12 months of identity theft monitoring services through TransUnion.
Maine clockDiscovered Apr 13, 2026 → Filed with AG May 15, 202632d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_396ab8174a86fb54Indiana State AGfiled 2026-05-15Verified
- bd_ac310dad8d7864aaNew Hampshire State AGfiled 2026-05-15Verified
- bd_3c5f477428b0993aTexas State AGfiled 2026-05-18(3d gap)Verified by operator
- bd_3bc73ffcf59d55b8Massachusetts State AGfiled 2026-05-01(14d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1c71d933-1b54-4e79-8f69-941bc890bf8f.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 15, 2026
- Raw hash
- 3c25eaa8ead3786ce1ab55c6020bdd485b587f148395fd03a289ac42ae9167ad
Reporting entity
- Name
- Hank’s Furniture, Inc.norm: hank s furniture
- Domain
- hanksfurniture.com
Victim entity
- Name
- Hank’s Furniture, Inc.norm: hank s furniture
- Domain
- hanksfurniture.com
Incident
- Discovered
- Apr 13, 2026
- Materiality determined
- —
- Notification sent
- May 15, 2026
- Affected individuals
- 4
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 5 weeks(32 days from discovery to filing)
- Compliance flags
- ME AG >30d · 32d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 13, 2026→ Filed with AG: May 15, 202632d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.