Cash Xpress
bd_0e7e399d8c663136 · schema v1 · pii pii-v1
Full breach record for Cash Xpress →Cash Express, LLC, a financial services company, reported a data breach to the Maine Attorney General. The breach, which was discovered on August 4, 2022, and occurred on January 29, 2022, was the result of an external system breach (hacking). The breach affected 7 Maine residents and a total of 106,521 individuals. The information acquired includes names in combination with financial account numbers or credit/debit card numbers (along with security codes, access codes, passwords, or PINs). Cash Express, LLC provided written notification to affected consumers on September 16, 2022, and offered one year of Experian IdentityWorks credit monitoring services.
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/8f4fd997-6635-481c-ba23-4e3cc7015938.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 15, 2022
- Raw hash
- 20ca868be7a1cd7f1a08d25978199fca80b8b36fdc44b5cbbb7ef6de7f306647
Reporting entity
- Name
- Cash Xpressnorm: cash xpress
- Domain
- app.cashxpress.net
- Industry
- Financial Services
Victim entity
- Name
- Cash Xpressnorm: cash xpress
- Domain
- app.cashxpress.net
- Industry
- Financial Services
Incident
- Discovered
- Aug 4, 2022
- Materiality determined
- —
- Notification sent
- Sep 16, 2022
- Affected individuals
- 7
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 6 weeks(42 days from discovery to filing)
- Compliance flags
- ME AG >30d · 42d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 4, 2022→ Filed with AG: Sep 15, 202242d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.