HackingFinancial ServicesFinanceData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIILowContained
The Pension Specialist
bd_698e627165b5d4ea · schema v1 · pii pii-v1
Full breach record for The Pension Specialist →The Pension Specialists, a retirement plan administrator in Machesney Park, IL, experienced an external network intrusion between February 18–20, 2024. The breach was discovered January 31, 2025, and materiality was determined December 16, 2024. Certain files containing personal information of 71,443 individuals total (41 Maine residents) may have been accessed or acquired without authorization. Kroll identity monitoring services were offered to affected individuals.
Maine clockDiscovered Jan 31, 2025 → Filed with AG Feb 14, 202514d ✓ ME AG ≤30d14 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_296e5d7e0b78bbafIndiana State AGfiled 2025-02-14Verified
- bd_6f41952c56c2bcf8California State AGfiled 2025-02-14Verified
- bd_92025e3aa3b58cc8Washington State AGfiled 2025-03-26(40d gap)Verified by operator
- bd_b7a6fd772df2aaeeCalifornia State AGfiled 2025-03-26(40d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/9243b094-0b3c-404c-99cc-e0d10798e8f7.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 14, 2025
- Raw hash
- d35e7d8e0720f8cf3e4d6a5232a8db483d67303872d013b588ce161566543602
Reporting entity
- Name
- The Pension Specialistnorm: the pension specialist
- Industry
- Financial Services
Victim entity
- Name
- The Pension Specialistnorm: the pension specialist
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Jan 31, 2025
- Materiality determined
- Dec 16, 2024
- Notification sent
- Feb 14, 2025
- Affected individuals
- 41
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 14 days(14 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 14d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 31, 2025→ Filed with AG: Feb 14, 202514d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.