HackingVulnerability ExploitCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHighContained
1919 Investment Counsel, LLC
bd_43858bbd8bd3ff8c · schema v1 · pii pii-v1
Full breach record for 1919 Investment Counsel, LLC →1919 Investment Counsel LLC reported an external system breach (hacking) on September 21, 2020, affecting 10,141 individuals, including 55 Maine residents. The incident involved the acquisition of personal identifiers combined with financial account or credit/debit card numbers. The company provided written notification and offered 24 months of credit monitoring services through Epiq.
Maine clockDiscovered Sep 21, 2020 → Filed with AG Nov 13, 202053d ⏱ ME AG >30d8 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_2c6df4785edb17ceMaine State AGfiled 2020-11-13Candidate
- bd_a4892bcb05cd1e5cCalifornia State AGfiled 2020-11-13Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/cd93cd94-3844-4f86-adfd-671950bf3246.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 13, 2020
- Raw hash
- 189d5561f156ca8c63c80e29a6a64fc7924104d90660b178ef9940383be61030
Reporting entity
- Name
- 1919 Investment Counsel, LLCnorm: 1919 investment counsel
- Industry
- Financial Services
Victim entity
- Name
- 1919 Investment Counsel, LLCnorm: 1919 investment counsel
- Industry
- Financial Services
Incident
- Discovered
- Sep 21, 2020
- Materiality determined
- —
- Notification sent
- Oct 16, 2020
- Affected individuals
- 10,141
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 8 weeks(53 days from discovery to filing)
- Compliance flags
- ME AG >30d · 53d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 21, 2020→ Filed with AG: Nov 13, 202053d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.