HackingManufacturingCustomer Data InvolvedGovernment IDHigh

SI Group, Inc.

bd_f90add1a926a96bc · schema v1 · pii pii-v1

Severity

High

Discovered

Aug 14, 2021

Filed

Dec 22, 2021

To disclose

19 weeks

Affected · nationwide

7,2417 in this filing

Linked

10 filings

Confidence

50%

Full breach record for SI Group, Inc. →

SI Group Inc. experienced a security breach on August 14, 2021, which was discovered the same day. The breach was a result of an external system hack. Information compromised included names and driver's license or non-driver identification card numbers. A total of 7 Maine residents were affected out of 7,241 individuals impacted overall. Affected individuals were notified on December 30, 2021, and were offered 24 months of credit and dark web monitoring services through Equifax.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Aug 14, 2021 → Filed with AG Dec 22, 2021130d ✗ ME AG >90d19 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 19 weeks / 130 days

Aug 14, 2021

Begins

Aug 14, 2021

Discovered

Dec 22, 2021

Filed

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

South Carolina State AGbd_9167738a09cf5c9c2021-12-29 · +7dVerified
New Hampshire State AGbd_06d7bed29e3a0a142022-01-11 · +20dVerified
New Hampshire State AGbd_dc5c3b844c5ddd7c2021-11-12 · +40dVerified
Maine State AGbd_988e049ab25ff2b82021-11-03 · +49dVerified

Show 5 more filings ↓up to 84d gap

Massachusetts State AGbd_beb5cca00b9eca962021-11-03 · +49dVerified
Montana State AGbd_2ba8825ab3d00a6d2021-10-26 · +57dCandidate
New Hampshire State AGbd_1adb32ff021d89942021-10-12 · +71dVerified
Maine State AGbd_27210f4b1c59c83b2021-09-30 · +83dCandidate
Indiana State AGbd_dc52271db267fe662021-09-29 · +84dVerified

Name: SI Group, Inc.
norm: si group

Name: SI Group, Inc.
norm: si group

Discovered: Aug 14, 2021
Breach occurred: Aug 14, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 30, 2021
Affected individuals: 7,241state + nationwide
Data types: Government ID
Data elements: Driver's licence number
Attack vector: Unauthorized Access

Changes made: Offered 24 months of credit monitoring and dark web monitoring services.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 weeks(130 days from discovery to filing)
Compliance flags: ME AG >90d · 130dME resident >60d · 138d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Aug 14, 2021
→ Filed with AG: Dec 22, 2021
130d 90 days ME AG >90d
Maine
Discovered: Aug 14, 2021
→ Notified: Dec 30, 2021
138d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Aug 14, 2021 → Filed with AG: Dec 22, 2021	130d	90 days	ME AG >90d
Maine	Discovered: Aug 14, 2021 → Notified: Dec 30, 2021	138d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 6 states

View merged incident ↗

Indiana State AGSep 29 · first

Maine State AG+1d

New Hampshire State AG+13d

Montana State AG+27d

Maine State AG+35d

Massachusetts State AG+35d

New Hampshire State AG+44d

Maine State AG+84d · this page

South Carolina State AG+91d

New Hampshire State AG+104d

Pattern: first filing Sep 29 (IN), last Jan 11 (NH) — a 104-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/5851b360-bdaf-451d-acd5-b67cba3d6fcd.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 22, 2021
Raw hash: ad279d9c4d937580cb2703bfa0ce8c7ed28998f0b682f8ca97eaedbb47243e27

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entitySI Group, Inc.

Victim entitySI Group, Inc.

Incidentdiscovered Aug 14, 2021

Stated responseOffered 24 months of credit monitoring and dark web monitoring services.

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov