HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Cabot Risk Strategies, LLC
bd_2069dae48c53e71d · schema v1 · pii pii-v1
Full breach record for Cabot Risk Strategies, LLC →Cabot Risk Strategies, LLC reported an external system breach (hacking) occurring on April 24, 2023, discovered on June 5, 2023. The incident affected 8,026 individuals, including 28 Maine residents. Acquired data included names combined with driver's license numbers. The company provided written notification on August 22, 2023, and offered 24 months of credit monitoring and identity theft restoration services through IDX.
Maine clockDiscovered Jun 5, 2023 → Filed with AG Aug 23, 202379d ⏱ ME AG >30d11 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_171d0f19dd19cbf5New Hampshire State AGfiled 2023-08-23Candidate
- bd_f293c84e1bcd3059Vermont State AGfiled 2023-08-22(1d gap)Verified
- bd_5c99c056cd275015New Hampshire State AGfiled 2023-07-26(28d gap)Verified
- bd_75caa8318a907dbeMontana State AGfiled 2023-07-26(28d gap)Candidate
Show 2 more filings ↓Show fewer ↑up to 28d gap
- bd_ef022000d5c0b51cMaine State AGfiled 2023-07-26(28d gap)Candidate
- bd_f7a2132520b8e990Vermont State AGfiled 2023-07-26(28d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/18405dde-fe42-42c1-b46d-be1fbd68ec14.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 23, 2023
- Raw hash
- 3da655aad44c6e8860355d61ee2c28c34653b39cfcf12e223762ac9ff2a8a167
Reporting entity
- Name
- Cabot Risk Strategies, LLCnorm: cabot risk strategies
- Domain
- cabotrisk.com
Victim entity
- Name
- Cabot Risk Strategies, LLCnorm: cabot risk strategies
- Domain
- cabotrisk.com
Incident
- Discovered
- Jun 5, 2023
- Materiality determined
- —
- Notification sent
- Aug 22, 2023
- Affected individuals
- 8,026
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Office of the Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 11 weeks(79 days from discovery to filing)
- Compliance flags
- ME AG >30d · 79dME resident >60d · 78d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 5, 2023→ Filed with AG: Aug 23, 202379d 30 days (soft) ME AG >30d Maine Discovered: Jun 5, 2023→ Notified: Aug 22, 202378d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.