HackingFinancial ServicesFinanceCapture App DataStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIILowResolved
American Trust Company
bd_287d49af40112a72 · schema v1 · pii pii-v1
Full breach record for American Trust Company →American Trust Company (AT Retirement Services, LLC and American Trust Company), a retirement plan recordkeeping and administrative services provider based in Cordova, TN, experienced unauthorized access to its email environment between August 8–13, 2024. Certain emails were copied without authorization. The breach was discovered on December 5, 2024, after a comprehensive review. 54 Maine residents were affected. Experian IdentityWorks (12 months) was offered. Notice sent January 2, 2025.
Leak gap clock✗ Leak >180d28 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
A leak claim by quantum about this victim predates this filing by 904 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_ca6b8a9f4340b8b3Vermont State AGfiled 2025-01-02Verified
- bd_d444b726115399bcWashington State AGfiled 2025-01-02Verified
- bd_dbf1280fe84a4fa0California State AGfiled 2025-01-02Verified
- bd_e428feb5486279e1Indiana State AGfiled 2025-01-02Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d9dd26cb-0c7c-4bdf-9be0-887ae32dbb7a.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 2, 2025
- Raw hash
- 0a1c06c8d802593c3068a8c48a2db3fa81eb0b7215a410f820c480c8a6860d92
Reporting entity
- Name
- American Trust Companynorm: american trust
- Industry
- Financial Services / Retirement Plan Administration
Victim entity
- Name
- American Trust Companynorm: american trust
- Industry
- Financial Services / Retirement Plan Administration
- Industry
- Financial Servicesllm
Incident
- Discovered
- Dec 5, 2024
- Materiality determined
- —
- Notification sent
- Jan 2, 2025
- Affected individuals
- 54
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1114 Email CollectionT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notification filed with Maine Attorney General
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- Leak >180dME AG ≤30d · 28d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 5, 2024→ Filed with AG: Jan 2, 202528d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.