HackingFinancial ServicesFinanceCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumContained
Memberclose LLC
bd_152b61b1bbabe4ef · schema v1 · pii pii-v1
Full breach record for Memberclose LLC →Memberclose LLC, a financial services company providing closing services, experienced an external hacking incident on October 29-30, 2025, in which an unauthorized party downloaded data from a cloud application. The breach was discovered on December 1, 2025. Compromised data included full names, dates of birth, and Social Security numbers. 4,845 individuals were affected total, including 48 Maine residents. Kroll credit monitoring was offered to affected individuals.
Maine clockDiscovered Dec 1, 2025 → Filed with AG Jan 15, 202645d ⏱ ME AG >30d6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_67e63e1fc12946ceVermont State AGfiled 2026-01-15Verified
- bd_83cd25f40fe6fedbIndiana State AGfiled 2026-01-15Verified
- bd_80c826d6a50e264fNew Hampshire State AGfiled 2026-01-20(5d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/77394c18-0ffe-442b-b4e5-0595abb6cc2a.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 15, 2026
- Raw hash
- 223fa2a26f2b663d9a2abdb8ea9ced85122e63a551b0a00e8934ac1557fd76ec
Reporting entity
- Name
- Memberclose LLCnorm: memberclose
- Industry
- Financial Services
Victim entity
- Name
- Memberclose LLCnorm: memberclose
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Dec 1, 2025
- Materiality determined
- —
- Notification sent
- Jan 15, 2026
- Affected individuals
- 48
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1530 Data from Cloud StorageT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Maine Attorney General
Compliance
- Time to disclose
- 6 weeks(45 days from discovery to filing)
- Compliance flags
- ME AG >30d · 45d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 1, 2025→ Filed with AG: Jan 15, 202645d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.