DisclosureLens
HackingFinancial ServicesFinanceVulnerability ExploitSupply Chain (3P Vendor)Financial accountFinancial credentialsHighContained

Financial Institution Service Corporation

bd_3c34af888523115e · schema v1 · pii pii-v1

Severity

High

Discovered

May 31, 2023

Filed

Sep 22, 2023

To disclose

16 weeks

Affected · nationwide

753,26164 in this filing

Confidence

50%
Full breach record for Financial Institution Service Corporation →10 incidents on file

Financial Institution Service Corporation, a financial services company, reported a data breach affecting 64 Maine residents. The breach was a result of the MOVEit Transfer third-party event, which occurred on May 30, 2023. The breach was discovered on May 31, 2023, and affected financial account numbers or credit/debit card numbers. The company offered 12 months of identity monitoring and restoration services through Kroll.

Maine clockDiscovered May 31, 2023 → Filed with AG Sep 22, 2023114d ✗ ME AG >90d16 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 1 days
discovery → filing · 16 weeks / 114 days

May 30, 2023

Begins

May 31, 2023

Discovered

Sep 22, 2023

Filed

vs. sector median

+8 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed753,261 affectedView incident
A leak claim by cl0p about this victim predates this filing by 77 days.View originating leak claim

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.