HackingCustomer Data InvolvedGovernment IDMedium

Loomis Armored US, LLC

bd_f70a36853009345f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 14, 2021

Filed

Aug 19, 2021

To disclose

9 weeks

Affected · nationwide

871 in this filing

Linked

3 filings

Confidence

50%

Full breach record for Loomis Armored US, LLC →

Loomis Armored US, LLC experienced an external system breach on December 9, 2020, which was discovered on June 14, 2021. The breach affected one Maine resident, compromising their driver's license number. Affected individuals were notified on August 19, 2021, and offered 12 months of credit monitoring and identity protection services through TransUnion Interactive.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jun 14, 2021 → Filed with AG Aug 19, 202166d ⏱ ME AG >30d9 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 187 days

discovery → filing · 9 weeks / 66 days

Dec 9, 2020

Begins

Jun 14, 2021

Discovered

Aug 19, 2021

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_b4f957e541ed77012021-08-20 · +1dVerified
New Hampshire State AGbd_a388f6a3b7e08d992021-08-23 · +4dVerified

Name: Loomis Armored US, LLC
norm: loomis armored us

Name: Loomis Armored US, LLC
norm: loomis armored us

Discovered: Jun 14, 2021
Breach occurred: Dec 9, 2020
Undetected for: 187 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 19, 2021
Affected individuals: 87state + nationwide
Data types: Government ID
Data elements: Driver's licence number
Attack vector: Unauthorized Access

Changes made: Offered 12 months of credit monitoring, identity restoration, and identity theft insurance through TransUnion Interactive.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(66 days from discovery to filing)
Compliance flags: ME AG >30d · 66d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jun 14, 2021
→ Filed with AG: Aug 19, 2021
66d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jun 14, 2021 → Filed with AG: Aug 19, 2021	66d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Maine State AGAug 19 · first · this page

Massachusetts State AG+1d

New Hampshire State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/80802cf1-420c-4b31-9f4c-e8f28d18f4c5.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 19, 2021
Raw hash: c10e579a576170980c34de3d63e1ae151bf3213e4b1b64e07e13c6ac4518ccd1

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityLoomis Armored US, LLC

Victim entityLoomis Armored US, LLC

Incidentdiscovered Jun 14, 2021

Stated responseOffered 12 months of credit monitoring, identity restoration, and identity theft insurance through TransUnion Interactive.

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov