Clustered 5 filings across 4 jurisdictions · filing window Dec 9, 2024 → Dec 19, 2025. View entity profile → Other incidents for this victim →
incident inc_ae5586d587764a0f · merge_method human · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
Gap between first leak claim and first regulatory filing
Time between earliest and latest filing
Not recorded for this incident
Materiality delta · SEC filing delay — no SEC 8-K in this cluster.
PII · Identity (basic) · Government ID
CA ME VT
Leak Site · State AG
Earliest sighting first · deep chronology in Litigation Timeline
Dec 4, 2024 → Dec 9, 2024
When the intrusion reportedly occurred, per the linked filings
Dec 9, 2024
Reported by MAINE AG, VERMONT AG, CALIFORNIA AG filings
Drivestream is a management and IT consulting firm specializing i n migrating the enterprise business processes of large and medium sized businesses to the Cloud. We are ready to upload more than 80 GB of private corporate docum ents including: SSNs, family contacts, contact numbers and e-mail addresses of employees and customers, driver licenses, passports etc.
Drivestream is a management and IT consulting firm specializing i n migrating the enterprise business processes of large and medium sized businesses to the Cloud. We are ready to upload more than 80 GB of private corporate docum ents including: SSNs, family contacts, contact numbers and e-mail addresses of employees and customers, driver licenses, passports etc.
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Drivestream Inc., an IT services company assisting businesses with Oracle data migration, experienced an external system breach between December 4–9, 2024. An unauthorized actor accessed and potentially exfiltrated data including names, Social Security numbers, and financial account information. One Maine resident was affected. The company engaged third-party forensic investigators, notified law enforcement, and offered 12 months of credit monitoring through Epiq.
Affected (this filing): 1
Drivestream Inc. notified consumers of a data breach occurring between Dec 4-9, 2024, where an unauthorized actor accessed systems storing employee data during an HCM migration. Impacted data included names combined with government identifiers (SSN, DOB, driver's license). Drivestream reported the incident to law enforcement, is cooperating with the investigation, and is offering credit monitoring services.
Drivestream, Inc. notified the California AG of an incident where an unauthorized actor accessed systems between Dec 4-9, 2024, and downloaded files containing employee data (including SSNs) during an HCM migration. Drivestream discovered the activity on Dec 9, 2024. The company engaged law enforcement, secured systems, and is offering credit monitoring. No evidence of misuse was found.