MalwareFinancial ServicesHealthcareProfessional ServicesHealthcareRansomwareInfostealerBianLianRansom DemandedRansom PaidData ExfiltratedData Leak ThreatenedActor NamedCustomer Data InvolvedTargetedDelayed DiscoveryPIIPHIFINANCIALIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICHighResolved
BBS Financial Services, LLC
bd_19b6ae23508a8036 · schema v1 · pii pii-v1
Full breach record for BBS Financial Services, LLC →BBS Financial Services LLC (tax prep, payroll, medical billing) suffered a BianLian ransomware/extortion attack beginning Dec 19, 2023, discovered Jan 29, 2024. Data was exfiltrated; ransom was paid and evidence of destruction obtained. Affected data: SSNs, DOBs, financial account numbers, and medical billing records. 70,168 notified nationally; 1,404 Maine residents notified in two stages.
Maine clockDiscovered Jan 29, 2024 → Filed with AG Nov 11, 2024287d ✗ ME AG >90d41 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_055878f91c03cfc4California State AGfiled 2024-11-11Verified
- bd_1da1372591c52265Montana State AGfiled 2024-11-11Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/77c00f4d-9eb4-44e0-bcd4-a8aed40e770e.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 11, 2024
- Raw hash
- aa5a034e8952db45e20da2bcfa810e9d2bdf8b59f7a4894f32c01eb87b459339
Reporting entity
- Name
- BBS Financial Services, LLCnorm: bbs financial
- Domain
- bbs1040.com
- Industry
- Accounting, Tax Preparation, Payroll, and Medical Billing Services
Victim entity
- Name
- BBS Financial Services, LLCnorm: bbs financial
- Domain
- bbs1040.com
- Industry
- Accounting, Tax Preparation, Payroll, and Medical Billing Services
- Industry
- Financial ServicesllmHealthcarellmProfessional Servicesllm
Incident
- Discovered
- Jan 29, 2024
- Materiality determined
- —
- Notification sent
- Jun 18, 2024
- Affected individuals
- 1,404
- Data types
- PIIPHIFINANCIALIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Ransomware· BianLian
- MITRE ATT&CK
- T1041 Exfiltration Over C2 ChannelT1486 Data Encrypted for Impact
- Threat actor
- BianLianExternalFinancial
- Regulator citations
- Reported to FBI via IC3.comEngaged IRS cybersecurity division; activated Return Integrity Compliance Services (RICS) safeguards by February 21, 2024
Compliance
- Time to disclose
- 41 weeks(287 days from discovery to filing)
- Compliance flags
- ME AG >90d · 287dME resident >60d · 141d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 29, 2024→ Filed with AG: Nov 11, 2024287d 90 days ME AG >90d Maine Discovered: Jan 29, 2024→ Notified: Jun 18, 2024141d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.