HackingCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Veristat Parent, L.P.
bd_fbb9318b422b65d7 · schema v1 · pii pii-v1
Full breach record for Veristat Parent, L.P. →Veristat Parent, L.P. reported an external system breach in which unauthorized actors accessed or acquired files on Veristat systems between February 12 and February 14, 2025. The breach was discovered on March 7, 2025. Personal information affected includes names and Social Security numbers. One Maine resident was affected out of 402 total individuals. Veristat notified federal law enforcement, and is offering 24 months of credit monitoring through Epiq.
Maine clockDiscovered Mar 7, 2025 → Filed with AG May 20, 202574d ⏱ ME AG >30d11 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
A leak claim by akira about this victim predates this filing by 95 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_56a0052d3239a505Leak Siteakirafiled 2025-03-11(70d gap)Verified
- bd_6bac5b6661597f3cLeak Siteakirafiled 2025-02-14(95d gap)Verified
Regulatory filings (2) · sorted by filing gap
- bd_877b9a5ec99e0878Indiana State AGfiled 2025-05-20Verified
- bd_98935b939bdac0e1New Hampshire State AGfiled 2025-05-20Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f6b83fc2-33b0-4e4d-a305-479c99a080b6.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 20, 2025
- Raw hash
- 353b58986d9979665c868987af62e7de7ee63a9ee8f9d5c98888600b93097b29
Reporting entity
- Name
- Veristat Parent, L.P.norm: veristat parent
- Domain
- veristat.com
- Industry
- Other Commercial
Victim entity
- Name
- Veristat Parent, L.P.norm: veristat parent
- Domain
- veristat.com
- Industry
- Other Commercial
Incident
- Discovered
- Mar 7, 2025
- Materiality determined
- —
- Notification sent
- May 20, 2025
- Affected individuals
- 1
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified Maine Attorney GeneralNotified federal law enforcement
Compliance
- Time to disclose
- 11 weeks(74 days from discovery to filing)
- Compliance flags
- ME AG >30d · 74dME resident >60d · 74dLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 7, 2025→ Filed with AG: May 20, 202574d 30 days (soft) ME AG >30d Maine Discovered: Mar 7, 2025→ Notified: May 20, 202574d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.