DisclosureLens
HackingHacking OtherCustomer Data InvolvedFinancial accountFinancial credentialsMediumResolved

Personal Legal Plans, Inc. and Personal Legal Plans of GA, Inc.

bd_538bee7245e24eef · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 27, 2021

Filed

Oct 25, 2021

To disclose

28 days

Affected · nationwide

9,3114 in this filing

Linked

3 filings

Confidence

50%
Full breach record for Personal Legal Plans, Inc. and Personal Legal Plans of GA, Inc. →

Personal Legal Plans, Inc. and Personal Legal Plans of GA, Inc. reported a data breach to the Maine Attorney General, which occurred on August 31, 2021, and was discovered on September 27, 2021. The breach was an external system breach (hacking) that affected 4 Maine residents and a total of 9,311 individuals. The compromised information included names in combination with financial account numbers or credit/debit card numbers and their security codes. The company notified the affected individuals on October 25, 2021, and offered 12 months of credit and identity monitoring services through Experian.

Maine clockDiscovered Sep 27, 2021 → Filed with AG Oct 25, 202128d ✓ ME AG ≤30d28 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 27 days
discovery → filing · 28 days

Aug 31, 2021

Begins

Sep 27, 2021

Discovered

Oct 25, 2021

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
Massachusetts State AGOct 25 · first
Indiana State AGOct 25 · first
Maine State AGOct 25 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.