HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICCriticalContained
ON Q FINANCIAL, LLC
bd_70331c336a189725 · schema v1 · pii pii-v1
Full breach record for ON Q FINANCIAL, LLC →On Q Financial, a financial services provider based in Scottsdale, AZ, reported an external system breach (hacking) occurring on February 21, 2024, discovered on March 14, 2024. The incident compromised the names and Social Security Numbers of approximately 211,650 individuals, including 69 Maine residents. On Q Financial sent written notifications on March 29, 2024, and provided 12 months of credit monitoring and identity remediation services through TransUnion to affected individuals.
Leak gap clock⏱ Leak >30d19 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 3 about the same incident.View merged incident
A leak claim by bianlian about this victim predates this filing by 42 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_47866e35155e8f93California State AGfiled 2024-04-02Candidate
- bd_a5faead4f3404bf8New Hampshire State AGfiled 2024-04-03(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/bfabbdc9-6593-4e0f-a9b5-bf21a94b2329.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 2, 2024
- Raw hash
- 882df6c50670100bb31df77f76cc55951c38716636d7b1edb5477b8fcda609f1
Reporting entity
- Name
- ON Q FINANCIAL, LLCnorm: on q financial
- Domain
- onqfinancial.com
- Industry
- Financial Services
Victim entity
- Name
- ON Q FINANCIAL, LLCnorm: on q financial
- Domain
- onqfinancial.com
- Industry
- Financial Services
Incident
- Discovered
- Mar 14, 2024
- Materiality determined
- —
- Notification sent
- Mar 29, 2024
- Affected individuals
- 211,650
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 19 days(19 days from discovery to filing)
- Compliance flags
- Leak >30dME AG ≤30d · 19d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 14, 2024→ Filed with AG: Apr 2, 202419d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.