Social EngineeringProfessional ServicesProfessional ServicesPhishingCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsGovernment IDHighResolved

Holliday Ingram, LLC

bd_3895c382b7eb5d6b · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 5, 2021

Filed

Mar 7, 2021

To disclose

4 weeks

Affected · nationwide

1,9362 in this filing

Linked

3 filings

Confidence

65%

Full breach record for Holliday Ingram, LLC →

Holliday Ingram, LLC experienced a phishing incident that occurred between June 3, 2020, and July 16, 2020, and was discovered on February 5, 2021. The breach affected 1,936 individuals, compromising names and financial account information. Affected individuals were notified on March 2, 2021, and those whose Social Security number was impacted were offered 12 months of complimentary credit monitoring services.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Feb 5, 2021 → Filed with AG Mar 7, 202130d ✓ ME AG ≤30d4 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 247 days

discovery → filing · 4 weeks / 30 days

Jun 3, 2020

Begins

Feb 5, 2021

Discovered

Mar 7, 2021

Filed

vs. sector median

14 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

South Carolina State AGbd_aed923d2fa9fa2f92021-03-09 · +2dVerified
Indiana State AGbd_28d8de820699644d2021-03-02 · +5dVerified

Name: Holliday Ingram, LLC
norm: holliday ingram

Name: Holliday Ingram, LLC
norm: holliday ingram
Industry: Professional Servicesllm

Discovered: Feb 5, 2021
Breach occurred: Jun 3, 2020 – Jul 16, 2020
Undetected for: 247 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 2, 2021
Affected individuals: 1,936state + nationwide
Data types: Identity (basic)Financial accountFinancial credentialsGovernment ID
Data elements: Financial account numberSocial Security number
Attack vector: Phishing
MITRE ATT&CK: T1566 Phishing
Threat actor: ExternalFinancial

During the incident: Notified affected individuals via written notice.
Offered identity theft protection services.
Changes made: Complimentary credit monitoring services for those whose SSN was impacted, TransUnion, 12 months.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(30 days from discovery to filing)
Compliance flags: ME AG ≤30d · 30d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Feb 5, 2021
→ Filed with AG: Mar 7, 2021
30d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Feb 5, 2021 → Filed with AG: Mar 7, 2021	30d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGMar 2 · first

Maine State AG+5d · this page

South Carolina State AG+7d

Pattern: first filing Mar 2 (IN), last Mar 9 (SC) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/326e17a0-6e39-4a6e-969a-e57ba3470279.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 7, 2021
Raw hash: 72cb8c1cce48762ef4e4e8ee2d15b1afecb52acc160300a7853080b64d3fb247

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityHolliday Ingram, LLC

Victim entityHolliday Ingram, LLC

Incidentdiscovered Feb 5, 2021

Stated responseNotified affected individuals via written notice.

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov