HackingFinancial ServicesFinanceStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedMulti-Stage ChainPIIIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSMediumContained
TRADEZERO AMERICA, INC.
bd_23d0e16efaa82b00 · schema v1 · pii pii-v1
Full breach record for TRADEZERO AMERICA, INC. →On or around July 29, 2024, TradeZero America Inc. discovered suspicious activity affecting the environment of its third-party vendor, Tawk.To. An unauthorized actor may have accessed customer files on the Tawk.To platform containing names, Social Security numbers, driver's license numbers, financial brokerage/bank account information, and passport numbers. TradeZero notified 45 Maine residents on September 19, 2024, and offered 12 months of credit monitoring through TransUnion/Cyberscout.
Maine clockDiscovered Aug 29, 2024 → Filed with AG Sep 19, 202421d ✓ ME AG ≤30d21 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_62f236eaafb48355California State AGfiled 2024-09-19Verified
- bd_a004f9015b01165bIndiana State AGfiled 2024-09-19Verified
- bd_c1b1002275e8fcedMontana State AGfiled 2024-09-19Verified
- bd_c66ea600f46a7580New Hampshire State AGfiled 2024-09-19Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/dd67b3b5-a87d-429f-91b1-8976062f484d.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 19, 2024
- Raw hash
- 721be235eb4b883eb70f6bd82574be90282b1da4ff7ae22c3f3d3e4e5e90a74d
Reporting entity
- Name
- TRADEZERO AMERICA, INC.norm: tradezero america
- Domain
- tradezero.com
- Industry
- Financial Services
Victim entity
- Name
- TRADEZERO AMERICA, INC.norm: tradezero america
- Domain
- tradezero.com
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Aug 29, 2024
- Materiality determined
- —
- Notification sent
- Sep 19, 2024
- Affected individuals
- 45
- Data types
- PIIIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified federal law enforcementProviding written notice to relevant state and federal regulators
- Third party
- via Tawk.To
- Initial access
- trusted_relationship
Compliance
- Time to disclose
- 21 days(21 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 21d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 29, 2024→ Filed with AG: Sep 19, 202421d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.