DisclosureLens
Social EngineeringFinancePhishingBECStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)Government IDMediumResolved

Spinnaker Management Group, LLC

bd_6fa72211ffa0116b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 13, 2020

Filed

Jan 14, 2021

To disclose

9 weeks

Affected · nationwide

4231 in this filing

Linked

4 filings

Confidence

50%
Full breach record for Spinnaker Management Group, LLC →

Spinnaker Management Group, LLC reported a business email compromise that occurred between October 6, 2020, and November 12, 2020. The breach was discovered on November 13, 2020. The incident resulted in the unauthorized access to names and Social Security numbers. The company notified affected individuals on January 14, 2021, and offered 24 months of credit monitoring services through Epiq.

Maine clockDiscovered Nov 13, 2020 → Filed with AG Jan 14, 202162d ⏱ ME AG >30d9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 38 days
discovery → filing · 9 weeks / 62 days

Oct 6, 2020

Begins

Nov 13, 2020

Discovered

Jan 14, 2021

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Filing propagation · 4 filings · 4 states

View merged incident ↗
Massachusetts State AGJan 14 · first
Indiana State AGJan 14 · first
Maine State AGJan 14 · first · this page
New Hampshire State AG+15d

Pattern: first filing Jan 14 (MA), last Jan 29 (NH) — a 15-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.