HackingCustomer Data InvolvedLow
OTA Management LLC
bd_36fa8abe158821af · schema v1 · pii pii-v1
Full breach record for OTA Management LLC →OTA Management LLC, a financial services company, experienced an external system breach discovered on March 24, 2025. The incident, which occurred on March 23, 2025, affected a total of 913 individuals, including four residents of Maine. In response, the company provided affected individuals with 12 to 24 months of credit monitoring and identity theft protection services.
Maine clockDiscovered Mar 24, 2025 → Filed with AG Dec 10, 2025261d ✗ ME AG >90d37 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_04ce7d2d1122c480New Hampshire State AGfiled 2025-12-15(5d gap)Verified
- bd_7c407af7f9dccca8Vermont State AGfiled 2025-09-05(96d gap)Verified
- bd_c38e2cb04c5e6cbaMaine State AGfiled 2025-09-05(96d gap)Candidate
- bd_0aa98ef7456d050dIndiana State AGfiled 2025-09-02(99d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e022ff4a-e161-4705-be1f-220b46103167.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 10, 2025
- Raw hash
- e5e2f9a10c8c4ac11ae05bd8f9ac4b119127784e65bf323c1fa8fd292cfd7a48
Reporting entity
- Name
- OTA Management LLCnorm: ota management
- Domain
- otallc.com
Victim entity
- Name
- OTA Management LLCnorm: ota management
- Domain
- otallc.com
Incident
- Discovered
- Mar 24, 2025
- Materiality determined
- —
- Notification sent
- Sep 2, 2025
- Affected individuals
- 4
- Data types
- —
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 37 weeks(261 days from discovery to filing)
- Compliance flags
- ME AG >90d · 261dME resident >60d · 162d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 24, 2025→ Filed with AG: Dec 10, 2025261d 90 days ME AG >90d Maine Discovered: Mar 24, 2025→ Notified: Sep 2, 2025162d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.