Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsCustomer Data InvolvedData ExfiltratedPIICREDENTIALSFINANCIALIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSMediumContained
Steven Miller & Co. LLC
bd_8138ad48c954de23 · schema v1 · pii pii-v1
Full breach record for Steven Miller & Co. LLC →Steven Miller & Co. LLC (Dallas, TX financial services) suffered a breach when an unauthorized actor accessed a web-based accounting platform via phishing, discovered July 8, 2024. Breach dates: July 6 and Aug 23, 2024. Data exposed: names, SSNs, driver's licenses, card numbers, account numbers, financial passcodes. 661 total affected; 2 Maine residents. Notifications sent Jan 21, 2025.
Maine clockDiscovered Jul 8, 2024 → Filed with AG Jan 29, 2025205d ✗ ME AG >90d29 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_a27c7858cfaad7f9Maryland State AGfiled 2025-01-29Verified
- bd_c66c03f8089ac597New Hampshire State AGfiled 2025-01-27(2d gap)Verified
- bd_c7eb88ee1f2b3558Indiana State AGfiled 2025-01-21(8d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/4b1ba565-f7b3-4599-9a8f-df23a4af3e68.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 29, 2025
- Raw hash
- 28b72b09a72c03dd33650ca1659c805d9a4e2cbd5f5e02656a4d0133c403e25b
Reporting entity
- Name
- Steven Miller & Co. LLCnorm: steven miller
- Industry
- Financial Services
Victim entity
- Name
- Steven Miller & Co. LLCnorm: steven miller
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Jul 8, 2024
- Materiality determined
- —
- Notification sent
- Jan 21, 2025
- Affected individuals
- 2
- Data types
- PIICREDENTIALSFINANCIALIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566 PhishingT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- phishing_link
Compliance
- Time to disclose
- 29 weeks(205 days from discovery to filing)
- Compliance flags
- ME AG >90d · 205dME resident >180d · 197d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 8, 2024→ Filed with AG: Jan 29, 2025205d 90 days ME AG >90d Maine Discovered: Jul 8, 2024→ Notified: Jan 21, 2025197d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.