HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHighResolved
CopperPoint Insurance Company, Pacific Compensation Insurance Company, and Alaska National Insurance Company
bd_42283b407c77434f · schema v1 · pii pii-v1
Full breach record for CopperPoint Insurance Company, Pacific Compensation Insurance Company, and Alaska National Insurance Company →CopperPoint Insurance Company, Pacific Compensation Insurance Company, and Alaska National Insurance reported an external system breach (hacking) occurring on January 8, 2021, discovered on July 22, 2021. The incident compromised names and Social Security Numbers of 38,653 individuals, including 2 Maine residents. Written notification was sent on November 5, 2021, offering 12 months of identity protection services.
Maine clockDiscovered Jul 22, 2021 → Filed with AG Nov 9, 2021110d ✗ ME AG >90d16 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_313453b3aaf7b850Montana State AGfiled 2021-11-05(4d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/fc88b1ad-41a6-44cb-9f2f-e46fb430bb27.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 9, 2021
- Raw hash
- 152a78c11b14380876870bda07f89ab6e448af3a9cc288fd7fe3907fd0ec8f96
Reporting entity
- Name
- CopperPoint Insurance Company, Pacific Compensation Insurance Company, and Alaska National Insurance Companynorm: copperpoint insurance company pacific compensation insurance company and alaska national insurance
- Industry
- Financial Services
Victim entity
- Name
- CopperPoint Insurance Company, Pacific Compensation Insurance Company, and Alaska National Insurance Companynorm: copperpoint insurance company pacific compensation insurance company and alaska national insurance
- Industry
- Financial Services
Incident
- Discovered
- Jul 22, 2021
- Materiality determined
- —
- Notification sent
- Nov 5, 2021
- Affected individuals
- 38,653
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notification with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 16 weeks(110 days from discovery to filing)
- Compliance flags
- ME AG >90d · 110dME resident >60d · 106d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 22, 2021→ Filed with AG: Nov 9, 2021110d 90 days ME AG >90d Maine Discovered: Jul 22, 2021→ Notified: Nov 5, 2021106d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.