The Maine Office of the Attorney General disclosed a data breach affecting CBD Industries, LLC, which occurred between March 30, 2020, and May 18, 2020, due to an external system hacking incident. The breach compromised sensitive financial data of 42,694 individuals, including 192 Maine residents. The exposed information included financial account numbers, credit/debit card numbers, and security codes, posing a significant risk of fraud and financial exploitation. While the exact method of the breach was not detailed, the incident highlights vulnerabilities in the company’s external systems, leading to unauthorized access by malicious actors. The exposure of payment card details, particularly with security codes, increases the likelihood of fraudulent transactions, identity theft, and reputational damage for the affected individuals and the company. No evidence was provided regarding broader operational disruptions or additional data types (e.g., personal health records) being compromised.