DisclosureLens
HackingFinancial ServicesFinanceCustomer Data InvolvedPIIIdentity (basic)LowContained

Young & Company

bd_4c19d57ab180c6cd · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 31, 2026

Filed

May 11, 2026

To disclose

6 weeks

Affected

1state residents only

Linked

3 filings

Confidence

65%
Full breach record for Young & Company →

Young & Company, a financial services provider based in Lake Mary, FL, reported an external system breach (hacking) occurring on 02/24/2025. The incident affected 1 Maine resident. The breach was discovered on 03/31/2026, and written notification was sent on 05/11/2026. The company provided 12 months of credit monitoring and identity protection services through IDX.

Maine clockDiscovered Mar 31, 2026 → Filed with AG May 11, 202641d ⏱ ME AG >30d6 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 400 days
discovery → filing · 6 weeks / 41 days

Feb 24, 2025

Begins

Mar 31, 2026

Discovered

May 11, 2026

Filed

vs. sector median

2 wks faster

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
Indiana State AGMay 11 · first
Massachusetts State AGMay 11 · first
Maine State AGMay 11 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.