DisclosureLens
HackingCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Financial accountFinancial credentialsMedium

Metropolitan Realty Group

bd_5f9291142184ae1a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 26, 2021

Filed

Nov 10, 2021

To disclose

11 weeks

Affected · nationwide

27,45412 in this filing

Linked

4 filings

Confidence

65%
Full breach record for Metropolitan Realty Group →

Metropolitan Realty Group reported an external system breach that occurred between September and November 2020 and was discovered on August 26, 2021. The breach affected 27,454 individuals, compromising their names and financial account numbers with associated security codes or PINs. The company began notifying affected individuals on November 10, 2021, and offered 12 months of credit monitoring services.

Maine clockDiscovered Aug 26, 2021 → Filed with AG Nov 10, 202176d ⏱ ME AG >30d11 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 357 days
discovery → filing · 11 weeks / 76 days

Sep 3, 2020

Begins

Aug 26, 2021

Discovered

Nov 10, 2021

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Filing propagation · 4 filings · 4 states

View merged incident ↗
Indiana State AGNov 10 · first
Massachusetts State AGNov 10 · first
Maine State AGNov 10 · first · this page
New Hampshire State AG+5d

Pattern: first filing Nov 10 (IN), last Nov 15 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.