HackingFinancial ServicesFinanceHacking OtherCustomer Data InvolvedIdentity (basic)Government IDHighResolved

Acclivity Financial

bd_31816f0a602a5eb0 · schema v1 · pii pii-v1

Severity

High

Discovered

Jan 7, 2021

Filed

Apr 16, 2021

To disclose

14 weeks

Affected · nationwide

2,6955 in this filing

Linked

3 filings

Confidence

50%

Full breach record for Acclivity Financial →2 incidents on file

Acclivity Financial, LLC, a subsidiary of Citizens Bank, reported an external system breach (hacking) that occurred on October 2, 15, and 16, 2020. The breach was discovered on January 7, 2021, and affected 5 Maine residents. The compromised information included names and Social Security numbers. In response, the company offered two years of complimentary credit monitoring, identity theft protection, and Dark Web monitoring services through Identity Theft Guard Solutions.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jan 7, 2021 → Filed with AG Apr 16, 202199d ✗ ME AG >90d14 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 97 days

discovery → filing · 14 weeks / 99 days

Oct 2, 2020

Begins

Jan 7, 2021

Discovered

Apr 16, 2021

Filed

vs. sector median

+6 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_103ee47488611a6e2021-04-16Candidate
New Hampshire State AGbd_6a9cf021cde62e3f2021-04-16Verified

Name: Acclivity Financial
norm: acclivity financial

Name: Acclivity Financial
norm: acclivity financial
Industry: Financial Servicesllm

Discovered: Jan 7, 2021
Breach occurred: Oct 2, 2020 – Oct 16, 2020
Undetected for: 97 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 16, 2021
Affected individuals: 2,695state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
Threat actor: External

Changes made: Offered 2 years of credit monitoring, identity theft protection, and Dark Web monitoring services through Identity Theft Guard Solutions.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(99 days from discovery to filing)
Compliance flags: ME AG >90d · 99d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jan 7, 2021
→ Filed with AG: Apr 16, 2021
99d 90 days ME AG >90d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jan 7, 2021 → Filed with AG: Apr 16, 2021	99d	90 days	ME AG >90d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGApr 16 · first

New Hampshire State AGApr 16 · first

Maine State AGApr 16 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/43d443fb-46d8-4166-bab3-86e9942107bc.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 16, 2021
Raw hash: 0c2668f7a3f7784e1533b78c7d44b2c0d00b1f44a600009503713ef3b5b54d71

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityAcclivity Financial

Victim entityAcclivity Financial

Incidentdiscovered Jan 7, 2021

Stated responseOffered 2 years of credit monitoring, identity theft protection, and Dark Web monitoring services through Identity Theft Guard Solutions.

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov