HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHighContained
AdviceOne, LLC
bd_234c7e715d5f5ead · schema v1 · pii pii-v1
Full breach record for AdviceOne, LLC →AdviceOne, LLC, a financial services provider based in Glastonbury, CT, reported an external system breach (hacking) occurring on February 23, 2022, discovered on April 26, 2022. The incident affected 7,008 individuals, including 48 Maine residents. The attacker acquired names and personal identifiers combined with financial account or credit/debit card numbers. AdviceOne notified affected individuals in writing on May 25, 2022, and provided 24 months of credit monitoring and identity theft protection services through Experian.
Maine clockDiscovered Apr 26, 2022 → Filed with AG May 25, 202229d ✓ ME AG ≤30d29 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_faff6627e2cf86a7Montana State AGfiled 2022-05-25Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b090abaf-5ac7-4a5c-9e03-7ecb1ae096f3.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 25, 2022
- Raw hash
- c898850c0fd1fc4cfe2facaf94f75c60c14c07b170256ed554615fef0dd3d1da
Reporting entity
- Name
- AdviceOne, LLCnorm: adviceone
- Industry
- Financial Services
Victim entity
- Name
- AdviceOne, LLCnorm: adviceone
- Industry
- Financial Services
Incident
- Discovered
- Apr 26, 2022
- Materiality determined
- —
- Notification sent
- May 25, 2022
- Affected individuals
- 7,008
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 29 days(29 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 29d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 26, 2022→ Filed with AG: May 25, 202229d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.