HackingFinancial ServicesFinanceStolen CredentialsCapture App DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumContained
Mark Feigenbaum, CFP
bd_507840f1aaf23e65 · schema v1 · pii pii-v1
Full breach record for Mark Feigenbaum, CFP →Mark Feigenbaum, CFP, a financial services firm, reported that an unauthorized person gained access to an employee email account between February 1 and February 9, 2025. The breach was discovered on approximately March 23, 2025, following a review of potentially impacted data. One Maine resident's name and Social Security number were potentially exposed. Affected individuals were notified on April 17, 2025, and offered 12 months of credit monitoring through IDX.
Maine clockDiscovered Mar 23, 2025 → Filed with AG Apr 18, 202526d ✓ ME AG ≤30d26 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e7cfbffd-52b2-4d73-adfa-4538679b3ce3.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 18, 2025
- Raw hash
- 5fb506af953dc2d23c1d68d28389699b0d3e06b57b0b89b8ff11993a26a21f66
Reporting entity
- Name
- Mark Feigenbaum, CFPnorm: mark feigenbaum cfp
- Domain
- winchesterfinancial.us
- Industry
- Financial Services
Victim entity
- Name
- Mark Feigenbaum, CFPnorm: mark feigenbaum cfp
- Domain
- winchesterfinancial.us
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Mar 23, 2025
- Materiality determined
- —
- Notification sent
- Apr 17, 2025
- Affected individuals
- 1
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Feigenbaum is providing written notice of this incident to relevant state regulators.Feigenbaum notified federal law enforcement regarding the event.
Compliance
- Time to disclose
- 26 days(26 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 26d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 23, 2025→ Filed with AG: Apr 18, 202526d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.