HackingFinancial ServicesFinanceDelayed DiscoveryCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDHigh

Kenneth M. Gerstein, CPA, MST, LLC

bd_1c1ff75fe67b3e7a · schema v1 · pii pii-v1

Severity

High

Discovered

Jan 21, 2022

Filed

Sep 7, 2022

To disclose

33 weeks

Affected · nationwide

1,4004 in this filing

Linked

4 filings

Confidence

65%

Full breach record for Kenneth M. Gerstein, CPA, MST, LLC →

Kenneth M. Gerstein, CPA, MST, LLC, a financial services firm, experienced an external system breach between January 7, 2022, and January 22, 2022. The incident, discovered on January 21, 2022, affected 1,400 individuals and compromised names and Social Security Numbers. The company notified affected individuals on September 7, 2022, and offered twelve months of credit monitoring and identity restoration services through Experian.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jan 21, 2022 → Filed with AG Sep 7, 2022229d ✗ ME AG >90d33 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 14 days

discovery → filing · 33 weeks / 229 days

Jan 7, 2022

Begins

Jan 21, 2022

Discovered

Sep 7, 2022

Filed

vs. sector median

+24 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Montana State AGbd_a03eb76372e076c52022-09-07Verified
Massachusetts State AGbd_a7c6d5361f976eac2022-09-07Verified
New Hampshire State AGbd_780f2993e3b30aa62022-09-12 · +5dVerified

Name: Kenneth M. Gerstein, CPA, MST, LLC
norm: kenneth m gerstein cpa mst

Name: Kenneth M. Gerstein, CPA, MST, LLC
norm: kenneth m gerstein cpa mst
Industry: Financial Servicesllm

Discovered: Jan 21, 2022
Breach occurred: Jan 7, 2022 – Jan 22, 2022
Undetected for: 14 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 7, 2022
Affected individuals: 1,400state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
Threat actor: External

During the incident: Notified affected individuals in writing
Offered twelve (12) months of credit monitoring and identity restoration services through Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 33 weeks(229 days from discovery to filing)
Compliance flags: ME AG >90d · 229dME resident >60d · 229d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jan 21, 2022
→ Filed with AG: Sep 7, 2022
229d 90 days ME AG >90d
Maine
Discovered: Jan 21, 2022
→ Notified: Sep 7, 2022
229d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jan 21, 2022 → Filed with AG: Sep 7, 2022	229d	90 days	ME AG >90d
Maine	Discovered: Jan 21, 2022 → Notified: Sep 7, 2022	229d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGSep 7 · first

Massachusetts State AGSep 7 · first

Maine State AGSep 7 · first · this page

New Hampshire State AG+5d

Pattern: first filing Sep 7 (MT), last Sep 12 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/2cbd9b43-3ae3-4b8e-acaf-d3856c2757a6.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 7, 2022
Raw hash: 4c88041891411dcb7a17395bef39ba9932d452e4f45888d871a8c5e0f18a8e9d

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityKenneth M. Gerstein, CPA, MST, LLC

Victim entityKenneth M. Gerstein, CPA, MST, LLC

Incidentdiscovered Jan 21, 2022

Stated responseNotified affected individuals in writing

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov