HackingCustomer Data InvolvedTargetedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Financière des Professionnels
bd_291d85ee7638b2b6 · schema v1 · pii pii-v1
Full breach record for Financière des Professionnels →Financière des Professionnels, a financial services entity based in Montreal, reported an external system breach (hacking) occurring between January 19, 2021, and April 2, 2021. The incident compromised the personal information of 16,845 individuals, including names and driver's license numbers. One Maine resident was affected. The company notified affected individuals in writing on July 8, 2021, and provided five years of credit monitoring and identity theft protection services through Equifax.
Maine clockDiscovered Feb 11, 2021 → Filed with AG Jul 6, 2021145d ✗ ME AG >90d21 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed16,845 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1b63274e-ad07-4163-b36a-4fa57abc0154.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 6, 2021
- Raw hash
- dd4a05fd5836597a63d9c932ddfa46417a37801a3f2adffc7c73ca39559f3d34
Reporting entity
- Name
- Financière des Professionnelsnorm: financiere des professionnels
Victim entity
- Name
- Financière des Professionnelsnorm: financiere des professionnels
Incident
- Discovered
- Feb 11, 2021
- Materiality determined
- —
- Notification sent
- Jul 8, 2021
- Affected individuals
- 16,845
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 21 weeks(145 days from discovery to filing)
- Compliance flags
- ME AG >90d · 145dME resident >60d · 147d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 11, 2021→ Filed with AG: Jul 6, 2021145d 90 days ME AG >90d Maine Discovered: Feb 11, 2021→ Notified: Jul 8, 2021147d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.