HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
1919 Investment Counsel, LLC
bd_2c6df4785edb17ce · schema v1 · pii pii-v1
Full breach record for 1919 Investment Counsel, LLC →1919 Investment Counsel, LLC reported an external system breach (hacking) on September 21, 2020, affecting 10,141 individuals. The incident compromised names and driver's license numbers. The company notified affected individuals in writing between October 16 and November 20, 2020, and provided 24 months of credit monitoring services through Epiq. 55 Maine residents were specifically affected.
Maine clockDiscovered Sep 21, 2020 → Filed with AG Nov 13, 202053d ⏱ ME AG >30d8 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_43858bbd8bd3ff8cMaine State AGfiled 2020-11-13Candidate
- bd_a4892bcb05cd1e5cCalifornia State AGfiled 2020-11-13Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0d78cb74-1dbf-4df2-865d-cd4d7ae2c5ad.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 13, 2020
- Raw hash
- e10d87d33e53d83d6f9dade0b15de60d3d9162ecef5bb7367105318dcbeab57c
Reporting entity
- Name
- 1919 Investment Counsel, LLCnorm: 1919 investment counsel
Victim entity
- Name
- 1919 Investment Counsel, LLCnorm: 1919 investment counsel
Incident
- Discovered
- Sep 21, 2020
- Materiality determined
- —
- Notification sent
- Oct 16, 2020
- Affected individuals
- 10,141
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Office of the Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 8 weeks(53 days from discovery to filing)
- Compliance flags
- ME AG >30d · 53d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 21, 2020→ Filed with AG: Nov 13, 202053d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.