HackingFinancial ServicesFinanceCustomer Data InvolvedPIIIdentity (basic)FinancialLowContained

Advance America

bd_324083bfac683e39 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 7, 2023

Filed

Aug 14, 2023

To disclose

27 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

65%

Full breach record for Advance America →

Advance America notified customers of a data security incident occurring on or around February 7, 2023, where an unauthorized actor accessed corporate business records containing personal information. The company engaged third-party cybersecurity experts, reported the incident to law enforcement, and implemented additional security measures. Identity monitoring services were offered to affected individuals.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d27 weeks discovery → filing

Incident timeline

discovery → filing · 27 weeks / 188 days

Feb 7, 2023

Begins

Feb 7, 2023

Discovered

Aug 14, 2023

Filed

vs. sector median

+18 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteblack_bastabd_e2398760aecf29e72023-03-23 · +143dVerified by operator

Regulatory filings (2) · sorted by filing gap

Delaware State AGbd_44194c52e6534a232023-08-15 · +1dVerified by operator
Vermont State AGbd_44ea510f141a9b172023-08-15 · +1dVerified

Name: Advance America
norm: advance america
Domain: advanceamerica.net

Name: Advance America
norm: advance america
Domain: advanceamerica.net
Industry: Financial Servicesllm

Discovered: Feb 7, 2023
Breach occurred: Feb 7, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Financial
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Reported this incident to law enforcement

During the incident: Launched an investigation to better understand the scope and impact of the incident
Engaged third-party cybersecurity experts to remediate, further investigate what happened, and determine the scope of the incident
Reported this incident to law enforcement
Implemented additional security measures to further fortify its network’s security measures and protocols
Instituted more frequent and rigorous security training
Changes made: Implemented additional security measures to further fortify its network’s security measures and protocols and protect customers’ information, including leading industry security tools and improved monitoring
Enhancing administrative and technical safeguards
Instituting more frequent and rigorous security training
Secured the services of Kroll to provide identity monitoring and protection services at no cost to you for one year
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 weeks(188 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 2 states

View merged incident ↗

Delaware State AGAug 14 · first · this page

Delaware State AG+1d

Vermont State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2023/08/ELN-18661-Purpose-Financial-2-Ad-CM-12m-r3prf.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 14, 2023
Raw hash: 85e3b958314cea66340a26ce3c8d3de650711b2267843fc89506e4cc3397c5d6

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityAdvance America

Victim entityAdvance America

Incidentdiscovered Feb 7, 2023

Stated responseLaunched an investigation to better understand the scope and impact of the incident

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenanceattorneygeneral.delaware.gov