HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Elephant Insurance Services, LLC
bd_7d05c4c5c31b6d4e · schema v1 · pii pii-v1
Full breach record for Elephant Insurance Services, LLC →Elephant Insurance Services, LLC reported an external system breach that occurred between March 26, 2022, and April 1, 2022. The breach was discovered on April 25, 2022. The incident affected 2,762,687 individuals in total, including 154 residents of Maine. The compromised information includes names in combination with driver's license or non-driver identification card numbers. Affected individuals were notified on May 25, 2022, and offered 12 months of identity theft protection services through Kroll.
Maine clockDiscovered Apr 25, 2022 → Filed with AG May 25, 202230d ✓ ME AG ≤30d4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_02eea774d2f73349Washington State AGfiled 2022-05-25Candidate
- bd_5705d2f819bcc2f8Delaware State AGfiled 2022-05-25Verified
- bd_9be6865e69c3fc04Montana State AGfiled 2022-05-25Verified
- bd_9c3c27eeb6366a86California State AGfiled 2022-05-25Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/604c3805-9ac9-4bcc-938b-813905d66182.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 25, 2022
- Raw hash
- c7ccd8cd29d6c14d87466971e17b73d5f6322356d40715a4c98120ad56c633e8
Reporting entity
- Name
- Elephant Insurance Services, LLCnorm: elephant insurance
- Domain
- elephant.com
Victim entity
- Name
- Elephant Insurance Services, LLCnorm: elephant insurance
- Domain
- elephant.com
Incident
- Discovered
- Apr 25, 2022
- Materiality determined
- —
- Notification sent
- May 25, 2022
- Affected individuals
- 154
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 25, 2022→ Filed with AG: May 25, 202230d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.