HackingCapture App DataCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIPCILowContained
Rain Bird Corporation
bd_f93e313af4292b32 · schema v1 · pii pii-v1
Full breach record for Rain Bird Corporation →Rain Bird Corporation reported unauthorized access to its web store resulting in fraudulent activity associated with payment cards used between February 11, 2025, and September 5, 2025. The breach was discovered on approximately July 25, 2025. Potentially compromised data includes names, credit card numbers, card verification values, and associated access codes. Forty Maine residents were notified on December 11, 2025. Total affected individuals: 24,862.
Maine clockDiscovered Jul 25, 2025 → Filed with AG Dec 11, 2025139d ✗ ME AG >90d20 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 9 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- bd_086fcc56cd69f962Washington State AGfiled 2025-12-11Candidate
- bd_0bbdec6ac64a035aIndiana State AGfiled 2025-12-11Verified
- bd_1e46c37f904f2774Vermont State AGfiled 2025-12-11Verified
- bd_24aed5b22c9d73f8Oregon State AGfiled 2025-12-11Verified
Show 4 more filings ↓Show fewer ↑up to 1d gap
- bd_66ffdc5d32ba46ffNew Hampshire State AGfiled 2025-12-11Verified
- bd_bf8cf647d0c6afb9California State AGfiled 2025-12-11Verified
- bd_ea590b250b73be3fMontana State AGfiled 2025-12-11Verified
- bd_11c0a2c1f7bdc81aTexas State AGfiled 2025-12-12(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e518030a-01cf-437b-a095-5e3e247b5c5b.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 11, 2025
- Raw hash
- 5b0f5cf5530872e0b1352ef239bbbe774bee5824978f7f9c6725015c70bc3860
Reporting entity
- Name
- Rain Bird Corporationnorm: rain bird
- Domain
- rainbird.com
- Industry
- Other Commercial
Victim entity
- Name
- Rain Bird Corporationnorm: rain bird
- Domain
- rainbird.com
- Industry
- Other Commercial
Incident
- Discovered
- Jul 25, 2025
- Materiality determined
- —
- Notification sent
- Dec 11, 2025
- Affected individuals
- 40
- Data types
- PIIPCI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1185 Browser Session HijackingT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 20 weeks(139 days from discovery to filing)
- Compliance flags
- ME AG >90d · 139dME resident >60d · 139d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 25, 2025→ Filed with AG: Dec 11, 2025139d 90 days ME AG >90d Maine Discovered: Jul 25, 2025→ Notified: Dec 11, 2025139d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.