HackingCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDHigh

Insureon Holdings, LLC

bd_31295bffab2e5d7e · schema v1 · pii pii-v1

Severity

High

Discovered

Sep 1, 2021

Filed

Nov 8, 2021

To disclose

10 weeks

Affected · nationwide

1,4333 in this filing

Linked

7 filings

Confidence

66%

Full breach record for Insureon Holdings, LLC →

Insureon Holdings, LLC reported an external system breach discovered on September 1, 2021. The incident affected 1,433 individuals in total, including 3 residents of Maine. The compromised data included names and Social Security numbers. The company provided written notification to affected individuals on November 5, 2021, and offered 12 months of credit monitoring services through Equifax.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Sep 1, 2021 → Filed with AG Nov 8, 202168d ⏱ ME AG >30d10 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

discovery → filing · 10 weeks / 68 days

Sep 1, 2021

Discovered

Nov 8, 2021

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Washington State AGbd_fd5e9ff5d0c3d0122021-11-08Verified
Massachusetts State AGbd_c4529879ec06a8c82021-11-09 · +1dVerified
Montana State AGbd_4f9464f6776a35a02021-11-05 · +3dVerified
Indiana State AGbd_d7618d6f257de48c2021-11-05 · +3dVerified

Show 2 more filings ↓up to 77d gap

Maine State AGbd_a266ef352f5a631c2021-10-28 · +11dCandidate
Maine State AGbd_abc75dbe840694972022-01-24 · +77dVerified

Name: Insureon Holdings, LLC
norm: insureon holdings

Name: Insureon Holdings, LLC
norm: insureon holdings

Discovered: Sep 1, 2021
Materiality determined: —
Notification sent: Nov 5, 2021
Affected individuals: 1,433state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
Threat actor: External

During the incident: Provided written notification to affected consumers
Offered 12 months of Equifax full service credit monitoring
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(68 days from discovery to filing)
Compliance flags: ME AG >30d · 68dME resident >60d · 65d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Sep 1, 2021
→ Filed with AG: Nov 8, 2021
68d 30 days (soft) ME AG >30d
Maine
Discovered: Sep 1, 2021
→ Notified: Nov 5, 2021
65d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Sep 1, 2021 → Filed with AG: Nov 8, 2021	68d	30 days (soft)	ME AG >30d
Maine	Discovered: Sep 1, 2021 → Notified: Nov 5, 2021	65d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 5 states

View merged incident ↗

Maine State AGOct 28 · first

Montana State AG+8d

Indiana State AG+8d

Washington State AG+11d

Maine State AG+11d · this page

Massachusetts State AG+12d

Maine State AG+88d

Pattern: first filing Oct 28 (ME), last Jan 24 (ME) — a 88-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/efef94d7-2142-4f09-99c0-b43a5dff2823.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 8, 2021
Raw hash: 78d0b2bfa7ec96054c87f69a79902ae7abaccae68b493482818921f511c2467b

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityInsureon Holdings, LLC

Victim entityInsureon Holdings, LLC

Incidentdiscovered Sep 1, 2021

Stated responseProvided written notification to affected consumers

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov