HackingCustomer Data InvolvedLowContained
Legacy CPA
bd_2846359be8e3865d · schema v1 · pii pii-v1
Full breach record for Legacy CPA →Legacy CPA, a financial services company, reported a data breach affecting 2 Maine residents. The breach, described as an external system hacking incident, occurred on February 5, 2025, and was discovered on March 25, 2025. The company began notifying affected individuals on June 18, 2025, and offered 24 months of identity protection services through IDX.
Maine clockDiscovered Mar 25, 2025 → Filed with AG Jul 18, 2025115d ✗ ME AG >90d16 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/4a0a41eb-97a7-49b4-aaa7-be5fd32d44a4.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 18, 2025
- Raw hash
- 09c72e920fb7320a8725d7cada768a1630daee7fd9b0fdc4ddd37eee13e822af
Reporting entity
- Name
- Legacy CPAnorm: legacy cpa
- Industry
- Financial Services
Victim entity
- Name
- Legacy CPAnorm: legacy cpa
- Industry
- Financial Services
Incident
- Discovered
- Mar 25, 2025
- Materiality determined
- —
- Notification sent
- Jun 18, 2025
- Affected individuals
- 2
- Data types
- —
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 16 weeks(115 days from discovery to filing)
- Compliance flags
- ME AG >90d · 115dME resident >60d · 85d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 25, 2025→ Filed with AG: Jul 18, 2025115d 90 days ME AG >90d Maine Discovered: Mar 25, 2025→ Notified: Jun 18, 202585d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.