HackingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumResolved
QPharma Inc.
bd_fb60a7961d4b9edc · schema v1 · pii pii-v1
Full breach record for QPharma Inc. →On December 16, 2024, QPharma Inc. discovered suspicious activity in its computer environment. An unauthorized external actor accessed and acquired certain information on that same date, including names and Social Security numbers. QPharma secured its systems, conducted a comprehensive review, and notified 3 Maine residents (889 total affected) on or about February 27, 2025. Credit monitoring via TransUnion (24 months) was offered to affected individuals.
Maine clockDiscovered Dec 16, 2024 → Filed with AG Feb 27, 202573d ⏱ ME AG >30d10 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_1f8ce4ef073a49c3Indiana State AGfiled 2025-02-27Verified
- bd_5b50ddec2dfa912cNew Hampshire State AGfiled 2025-02-27Verified
- bd_c5c5734cb4792ee2Maryland State AGfiled 2025-02-27Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a3e1ba08-1eef-4d7c-9229-433893120ed8.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 27, 2025
- Raw hash
- 53a1e229846635fde83d11f14d53e1038d00b215e02bc175a0ee3df54c7a4105
Reporting entity
- Name
- QPharma Inc.norm: qpharma
- Domain
- qpharmacorp.com
- Industry
- Other Commercial
Victim entity
- Name
- QPharma Inc.norm: qpharma
- Domain
- qpharmacorp.com
- Industry
- Other Commercial
Incident
- Discovered
- Dec 16, 2024
- Materiality determined
- —
- Notification sent
- Feb 27, 2025
- Affected individuals
- 3
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notification provided to Maine Attorney GeneralNotification provided to three major credit reporting agencies: Equifax, Experian, and TransUnion
Compliance
- Time to disclose
- 10 weeks(73 days from discovery to filing)
- Compliance flags
- ME AG >30d · 73dME resident >60d · 73d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 16, 2024→ Filed with AG: Feb 27, 202573d 30 days (soft) ME AG >30d Maine Discovered: Dec 16, 2024→ Notified: Feb 27, 202573d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.