HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Edwards, Faust & Smith
bd_6db5410059daba01 · schema v1 · pii pii-v1
Full breach record for Edwards, Faust & Smith →Edwards, Faust & Smith, a financial services firm in Bangor, ME, reported an external system breach (hacking) occurring between Feb 4 and May 5, 2026. Discovered on Apr 30, 2026, the incident affected 928 individuals (837 Maine residents). Data types included names, personal identifiers, and government IDs. Written notifications were sent on May 28, 2026.
Maine clockDiscovered Apr 30, 2026 → Filed with AG May 27, 202627d ✓ ME AG ≤30d27 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed928 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/9e304244-c62f-461f-b602-17a20506fcf2.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 27, 2026
- Raw hash
- c91a9155d3e791c47c0d040b745866a93005771bf213ef8c8b77d0f5c656d5bd
Reporting entity
- Name
- Edwards, Faust & Smithnorm: edwards faust smith
- Domain
- efscpa.com
- Industry
- Financial Services
Victim entity
- Name
- Edwards, Faust & Smithnorm: edwards faust smith
- Domain
- efscpa.com
- Industry
- Financial Services
Incident
- Discovered
- Apr 30, 2026
- Materiality determined
- —
- Notification sent
- May 28, 2026
- Affected individuals
- 928
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 27 days(27 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 27d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 30, 2026→ Filed with AG: May 27, 202627d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.