DisclosureLens
HackingFinancial ServicesFinanceCustomer Data InvolvedGovernment IDMedium

Dunham & Associates Holdings, Inc.

bd_2784da90cc2f0ad2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 21, 2021

Filed

Feb 18, 2022

To disclose

8 weeks

Affected · nationwide

1981 in this filing

Linked

2 filings

Confidence

50%
Full breach record for Dunham & Associates Holdings, Inc. →

Dunham & Associates Holdings, Inc., a financial services company, reported an external system breach that occurred between October 22, 2021, and November 20, 2021. The breach was discovered on December 21, 2021. The compromised data includes names and Social Security Numbers. One resident of Maine was affected. The company offered 12 months of Experian IdentityWorks credit monitoring services to those impacted.

Maine clockDiscovered Dec 21, 2021 → Filed with AG Feb 18, 202259d ⏱ ME AG >30d8 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 60 days
discovery → filing · 8 weeks / 59 days

Oct 22, 2021

Begins

Dec 21, 2021

Discovered

Feb 18, 2022

Filed

vs. sector median

on median

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings · 2 states

View merged incident ↗
Indiana State AGFeb 18 · first
Maine State AGFeb 18 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.