Social EngineeringFinancial ServicesFinancePhishingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMedium
Ives Sultan & Spike CPAs
bd_259fa8f74e26c829 · schema v1 · pii pii-v1
Full breach record for Ives Sultan & Spike CPAs →Ives Sultan & Spike CPAs, a financial services company, reported an email phishing incident that occurred on May 12, 2020. The breach was discovered in October 2020 and affected 6 Maine residents. The compromised data included names and Social Security Numbers. Affected individuals were notified on September 16, 2021, and offered 12 months of identity theft protection services through TransUnion.
Maine clockDiscovered Oct 1, 2020 → Filed with AG Sep 16, 2021350d ✗ ME AG >90d50 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_20bc1895c8eb3bb6Montana State AGfiled 2021-09-16Candidate
- bd_729954edd6446243Maine State AGfiled 2021-09-16Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b42959e3-7c8c-40e0-ac69-b12587e543cb.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 16, 2021
- Raw hash
- b51f7b6159692457f5ad79e17854fe7419330d8dc4c782318d267e1eb8ee5433
Reporting entity
- Name
- Ives Sultan & Spike CPAsnorm: ives sultan spike cpas
Victim entity
- Name
- Ives Sultan & Spike CPAsnorm: ives sultan spike cpas
- Industry
- Financial Servicesllm
Incident
- Discovered
- Oct 1, 2020
- Materiality determined
- —
- Notification sent
- Sep 16, 2021
- Affected individuals
- 6
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- Threat actor
- External
Compliance
- Time to disclose
- 50 weeks(350 days from discovery to filing)
- Compliance flags
- ME AG >90d · 350dME resident >180d · 350d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 1, 2020→ Filed with AG: Sep 16, 2021350d 90 days ME AG >90d Maine Discovered: Oct 1, 2020→ Notified: Sep 16, 2021350d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.