HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Cayan, LLC
bd_1d903c17a105b9ad · schema v1 · pii pii-v1
Full breach record for Cayan, LLC →Cayan, LLC reported an external system breach (hacking) occurring between October 29, 2020, and November 18, 2020. The incident was discovered around March 15, 2021, affecting a total of 4,892 individuals, including 10 Maine residents. The breach compromised names and Social Security Numbers. Cayan provided written notification on April 22, 2021, and offered two years of complimentary credit monitoring and identity theft protection through Equifax.
Maine clockDiscovered Mar 15, 2021 → Filed with AG Jul 13, 2021120d ✗ ME AG >90d17 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4,892 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ac862b7d-e9b9-48b6-b279-2a1a0b08165b.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 13, 2021
- Raw hash
- 28d012fefc6b5696ce753f8a5b6f1632b6b35d63b32b71fba0bb07925c629c95
Reporting entity
- Name
- Cayan, LLCnorm: cayan
- Industry
- Financial Services
Victim entity
- Name
- Cayan, LLCnorm: cayan
- Industry
- Financial Services
Incident
- Discovered
- Mar 15, 2021
- Materiality determined
- —
- Notification sent
- Apr 22, 2021
- Affected individuals
- 4,892
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 17 weeks(120 days from discovery to filing)
- Compliance flags
- ME AG >90d · 120d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 15, 2021→ Filed with AG: Jul 13, 2021120d 90 days ME AG >90d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.