HackingFinancial ServicesFinanceCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Nicholas H. Safford & Co., Inc.
bd_7cb7387a3b4b8fe2 · schema v1 · pii pii-v1
Full breach record for Nicholas H. Safford & Co., Inc. →Nicholas H. Safford & Co., Inc., an investment counsel and private trustee firm, experienced unauthorized access to a single employee's email account between January 30, 2026 and March 12, 2026. Potentially exposed data includes full name, date of birth, partial or full SSN/EIN, account number, government-issued ID numbers, and mother's maiden name. 12 Maine residents were among the 337 total individuals affected. Kroll identity monitoring (24 months) was offered.
Maine clockDiscovered Mar 12, 2026 → Filed with AG Apr 10, 202629d ✓ ME AG ≤30d29 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_85b9d3ae3fa3a73eVermont State AGfiled 2026-04-10Verified
- bd_97f0ec0bc16330ecIndiana State AGfiled 2026-04-10Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/751ed441-01d3-4f16-9bd8-2c58efc33223.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 10, 2026
- Raw hash
- 0f138de1b26fab9e56aa5e6e1938f1da32a7e5a0ea2ba05668802e4d6b76b7a0
Reporting entity
- Name
- Nicholas H. Safford & Co., Inc.norm: nicholas h safford
- Domain
- saffords.com
- Industry
- Financial Services
Victim entity
- Name
- Nicholas H. Safford & Co., Inc.norm: nicholas h safford
- Domain
- saffords.com
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Mar 12, 2026
- Materiality determined
- —
- Notification sent
- Apr 10, 2026
- Affected individuals
- 12
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Maine Attorney General
Compliance
- Time to disclose
- 29 days(29 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 29d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 12, 2026→ Filed with AG: Apr 10, 202629d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.