DisclosureLens
HackingPIIIdentity (basic)LowContained

illumifin

bd_4834a8e85a0c3a7b · schema v1 · pii pii-v2

Severity

Low

Discovered

Nov 4, 2025

Filed

Mar 31, 2026

To disclose

21 weeks

Affected

795state residents only

Linked

12 filings

Confidence

67%
Full breach record for illumifin

illumifin Corporation, an insurance technology company, notified Montana residents of a cybersecurity incident discovered on November 4, 2025. An unauthorized person gained access to the network and copied files containing client information. The company engaged a third-party forensic firm, contained the activity, and notified law enforcement. The specific data elements were redacted in the notification letter.

Incident timeline

discovery → filing · 21 weeks / 147 days

Nov 4, 2025

Discovered

Mar 31, 2026

Filed

This filing is one of 12 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Show 6 more filingsup to 22d gap

Showing first 10 of 11 linked disclosures.

Filing propagation · 11 filings · 10 states

View merged incident ↗

Pattern: first filing Mar 10 (MN), last Apr 22 (OR) — a 43-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 11 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.