HackingCustomer Data InvolvedLow
Lumena Financial Strategies
bd_171d67daf7653d18 · schema v1 · pii pii-v1
Full breach record for Lumena Financial Strategies →Lumena Financial Strategies, a financial services company, reported a data breach to the Maine Attorney General. The breach, described as an external system breach (hacking), occurred on September 22, 2025, and was discovered the following day. The breach affected 575 individuals in total, including 4 residents of Maine. Affected individuals were notified on December 4, 2025, and offered identity theft protection services through IDX.
Maine clockDiscovered Sep 23, 2025 → Filed with AG Dec 12, 202580d ⏱ ME AG >30d11 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/3012e3d9-528c-419c-8b1f-08ac240ec498.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 12, 2025
- Raw hash
- 1c733627f7caf731e2a6566ef1b4de82a97c167569658cd69e4bc04e772b085b
Reporting entity
- Name
- Lumena Financial Strategiesnorm: lumena financial strategies
Victim entity
- Name
- Lumena Financial Strategiesnorm: lumena financial strategies
Incident
- Discovered
- Sep 23, 2025
- Materiality determined
- —
- Notification sent
- Dec 4, 2025
- Affected individuals
- 4
- Data types
- —
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 11 weeks(80 days from discovery to filing)
- Compliance flags
- ME AG >30d · 80dME resident >60d · 72d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 23, 2025→ Filed with AG: Dec 12, 202580d 30 days (soft) ME AG >30d Maine Discovered: Sep 23, 2025→ Notified: Dec 4, 202572d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.