HackingFinancial ServicesFinanceCustomer Data InvolvedFinancial accountFinancial credentialsMediumResolved

White & Associates

bd_08201068d1f563bb · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 25, 2021

Filed

Mar 21, 2022

To disclose

38 weeks

Affected · nationwide

6,7061 in this filing

Linked

5 filings

Confidence

75%

Full breach record for White & Associates →

Financial services firm White & Associates reported an external system breach that occurred and was discovered on June 25, 2021. The incident affected one Maine resident, compromising their name in combination with financial account or card numbers and their corresponding access codes. The company notified affected individuals on March 21, 2022, and offered 12 months of identity theft and credit monitoring services through Cyberscout.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jun 25, 2021 → Filed with AG Mar 21, 2022269d ⏱ ME AG >30d38 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 38 weeks / 269 days

Jun 25, 2021

Begins

Jun 25, 2021

Discovered

Mar 21, 2022

Filed

vs. sector median

+30 wks slower

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_1ab62634934202f92022-03-21Verified
Montana State AGbd_22572f2ac05e635c2022-03-21Verified
Massachusetts State AGbd_cfe03e4f947323b12022-03-21Verified
New Hampshire State AGbd_b5b9280172a33b8d2022-03-28 · +7dVerified

Name: White & Associates
norm: white associates
Industry: Financial Services

Name: White & Associates
norm: white associates
Industry: Financial Services
Industry: Financial Servicesllm

Discovered: Jun 25, 2021
Breach occurred: Jun 25, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 21, 2022
Affected individuals: 6,706state + nationwide
Data types: Financial accountFinancial credentials
Data elements: Financial account number
Attack vector: Unauthorized Access

Changes made: Offered 12 months of identity theft and credit monitoring services through Cyberscout
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 38 weeks(269 days from discovery to filing)
Compliance flags: ME AG >30d · 269dME resident >60d · 269d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jun 25, 2021
→ Filed with AG: Mar 21, 2022
269d 30 days (soft) ME AG >30d
Maine
Discovered: Jun 25, 2021
→ Notified: Mar 21, 2022
269d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jun 25, 2021 → Filed with AG: Mar 21, 2022	269d	30 days (soft)	ME AG >30d
Maine	Discovered: Jun 25, 2021 → Notified: Mar 21, 2022	269d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGMar 21 · first

Montana State AGMar 21 · first

Massachusetts State AGMar 21 · first

Maine State AGMar 21 · first · this page

New Hampshire State AG+7d

Pattern: first filing Mar 21 (IN), last Mar 28 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b7165d38-243f-40bf-b488-c1ffd81c55ff.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 21, 2022
Raw hash: 4086baf12bfe95c41c6026e23792fe8cbe7d5ba3056efacb0871cb68f33bba78

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityWhite & Associates

Victim entityWhite & Associates

Incidentdiscovered Jun 25, 2021

Stated responseOffered 12 months of identity theft and credit monitoring services through Cyberscout

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov