HackingStolen CredentialsCustomer Data InvolvedFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowResolved
TIAA and TIAA Life
bd_3f3db89400d4bdff · schema v1 · pii pii-v1
Full breach record for TIAA and TIAA Life →TIAA reported a data breach affecting one Maine resident. The breach occurred on May 5, 2020, and was discovered on February 21, 2021. The incident involved the manual input of stolen credentials, leading to the compromise of names and financial account numbers with their access codes. TIAA notified the affected individual on March 1, 2021, and offered two years of credit monitoring and identity theft protection services from Experian.
Maine clockDiscovered Feb 21, 2021 → Filed with AG Mar 1, 20218d ✓ ME AG ≤30d8 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/922cd016-9f01-4f84-95f3-f260e76f8667.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 1, 2021
- Raw hash
- 2e3bf82ca90106e8047a9b0e0ed7e985ee78c427b8d18fab3890592bd9ed87df
Reporting entity
- Name
- TIAA and TIAA Lifenorm: tiaa and tiaa life
Victim entity
- Name
- TIAA and TIAA Lifenorm: tiaa and tiaa life
Incident
- Discovered
- Feb 21, 2021
- Materiality determined
- —
- Notification sent
- Mar 1, 2021
- Affected individuals
- 1
- Data types
- FINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 8 days(8 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 8d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 21, 2021→ Filed with AG: Mar 1, 20218d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.