PhysicalTheftCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
API Financial Solutions
bd_6e57c384a91053ec · schema v1 · pii pii-v1
Full breach record for API Financial Solutions →API Financial Solutions reported the loss or theft of a device containing names and financial account numbers (combined with security codes/PINs) on June 28, 2023. The breach was discovered on August 30, 2023. Approximately 71,886 individuals were affected, including 3 Maine residents. Written notification was sent on September 29, 2023, offering 12 months of credit monitoring and identity theft protection.
Maine clockDiscovered Aug 30, 2023 → Filed with AG Sep 29, 202330d ✓ ME AG ≤30d4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_d565e19951a3aac6Montana State AGfiled 2023-10-13(14d gap)Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/24a23f95-cf38-4bc6-ad2b-256f441b3fd9.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 29, 2023
- Raw hash
- 42c5c60384cff861184773622b3cf8c0de14245bf74f0a80019da87734959896
Reporting entity
- Name
- API Financial Solutionsnorm: api financial
- Domain
- apisolutions.com
Victim entity
- Name
- API Financial Solutionsnorm: api financial
- Domain
- apisolutions.com
Incident
- Discovered
- Aug 30, 2023
- Materiality determined
- —
- Notification sent
- Sep 29, 2023
- Affected individuals
- 71,886
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1052 Exfiltration Over Physical Medium
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- removable_media
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 30, 2023→ Filed with AG: Sep 29, 202330d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.