HackingFinancial ServicesFinanceCustomer Data InvolvedDelayed DiscoveryPIILowContained
PennantPark Investment Advisers, LLC
bd_69b5e85cc2e8e9bc · schema v1 · pii pii-v1
Full breach record for PennantPark Investment Advisers, LLC →PennantPark Investment Advisers, LLC, a Miami Beach-based financial services firm, identified an intrusion by an unauthorized third party on certain of its systems. Unauthorized access occurred between December 22, 2024 and March 7, 2025, and was discovered on June 12, 2025. Approximately 3,655 individuals were affected total, including 2 Maine residents. Affected data may include personal information. IDX identity protection services (24 months) were offered to affected individuals.
Maine clockDiscovered Jun 12, 2025 → Filed with AG Jun 30, 202518d ✓ ME AG ≤30d18 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_9e4c8fbd23223843Indiana State AGfiled 2025-06-30Candidate
- bd_c34e3deec4ac408aTexas State AGfiled 2025-07-03(3d gap)Verified
- bd_fe7f24465ecb5e2eNew Hampshire State AGfiled 2025-06-27(3d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a7a2a6c4-a132-4639-928f-57a72ca0e5ec.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 30, 2025
- Raw hash
- 0ad367e42df966edac6c9b826bc2dd3382ac84eef39f4b47cbef934f95efa8c6
Reporting entity
- Name
- PennantPark Investment Advisers, LLCnorm: pennantpark investment advisers
- Domain
- pennantpark.com
- Industry
- Financial Services
Victim entity
- Name
- PennantPark Investment Advisers, LLCnorm: pennantpark investment advisers
- Domain
- pennantpark.com
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Jun 12, 2025
- Materiality determined
- —
- Notification sent
- Jun 30, 2025
- Affected individuals
- 2
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Maine Attorney General notification
Compliance
- Time to disclose
- 18 days(18 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 18d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 12, 2025→ Filed with AG: Jun 30, 202518d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.