DisclosureLens
HackingFinancial ServicesFinanceCustomer Data InvolvedData ExfiltratedDelayed DiscoveryIdentity (basic)Government IDHighResolved

Diversified Financial Services, LLC

bd_1a352dde3d0aecb0 · schema v1 · pii pii-v1

Severity

High

Discovered

Aug 4, 2021

Filed

Sep 9, 2021

To disclose

5 weeks

Affected · nationwide

3,5314 in this filing

Linked

4 filings

Confidence

65%
Full breach record for Diversified Financial Services, LLC →

Diversified Financial Services, LLC reported a data breach impacting 3,531 individuals, with 4 Maine residents affected. The breach, which occurred between March 19, 2021, and June 14, 2021, was discovered on August 4, 2021. The incident was described as an external system breach or hacking, resulting in the acquisition of names and driver's license numbers. Affected individuals were notified on September 3, 2021, and offered 12 months of identity theft protection services.

Maine clockDiscovered Aug 4, 2021 → Filed with AG Sep 9, 202136d ⏱ ME AG >30d5 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 138 days
discovery → filing · 5 weeks / 36 days

Mar 19, 2021

Begins

Aug 4, 2021

Discovered

Sep 9, 2021

Filed

vs. sector median

3 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Filing propagation · 4 filings · 4 states

View merged incident ↗
Montana State AGSep 2 · first
Massachusetts State AG+1d
Indiana State AG+1d
Maine State AG+7d · this page

Pattern: first filing Sep 2 (MT), last Sep 9 (ME) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.