Various Data Owners, As Identified in Appendix to Letter
bd_2d4c9090f956773b · schema v1 · pii pii-v1
Full breach record for Various Data Owners, As Identified in Appendix to Letter →Morgan Stanley, a financial services company, reported a data breach affecting various entities to whom it provides StockPlan Connect Services. The breach occurred at a third-party vendor, Guidehouse. The incident, which took place on January 20, 2021, and was discovered on May 20, 2021, involved an external system breach or hacking. The personal information of 116 Maine residents was compromised, including names and Social Security numbers. In response, Guidehouse offered affected individuals 24 months of credit monitoring and identity theft protection services through Experian IdentityWorks. Consumer notifications were sent on July 2, 2021.
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/80c03b97-a91f-4211-a785-99ec745b46bd.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 2, 2021
- Raw hash
- ea5cd690cedb7f834356a08e670c0fcbbb12050471c5cab0390577c6ca3c9b36
Reporting entity
- Name
- MORGAN STANLEYnorm: morgan stanley
- Domain
- morganstanley.com
Victim entity
- Name
- Various Data Owners, As Identified in Appendix to Letternorm: various data owners as identified in appendix to letter
Incident
- Discovered
- May 20, 2021
- Materiality determined
- —
- Notification sent
- Jul 2, 2021
- Affected individuals
- 116
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 6 weeks(43 days from discovery to filing)
- Compliance flags
- ME AG >30d · 43d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 20, 2021→ Filed with AG: Jul 2, 202143d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.