HackingFinancial ServicesFinanceCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumContained
Whittaker & Company
bd_84ce7e644f616e3e · schema v1 · pii pii-v1
Full breach record for Whittaker & Company →Whittaker & Company, a financial services firm in Seal Beach, CA, experienced an external network intrusion between February 28 and March 13, 2025. An unauthorized actor accessed the network and exfiltrated copies of certain documents. The breach was discovered on May 29, 2025, during a file review. One Maine resident's name and Social Security number were compromised. Notification was sent June 27, 2025. One year of Kroll credit monitoring and identity theft protection services was offered.
Leak gap clock⏱ Leak >90d29 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
A leak claim by spacebears about this victim predates this filing by 117 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_3bc52a4b6e7cdd1eCalifornia State AGfiled 2025-06-27Verified
- bd_9933baea0a9a9f66Indiana State AGfiled 2025-06-27Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c4fde829-ac61-4480-b347-198491dc9d5f.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 27, 2025
- Raw hash
- abdf03e312cf0c20de00f539fa4246b487f7d1ffd6614f017f5b4a2b60c5ae06
Reporting entity
- Name
- Whittaker & Companynorm: whittaker
- Domain
- whittakercpas.com
- Industry
- Financial Services
Victim entity
- Name
- Whittaker & Companynorm: whittaker
- Domain
- whittakercpas.com
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- May 29, 2025
- Materiality determined
- May 29, 2025
- Notification sent
- Jun 27, 2025
- Affected individuals
- 1
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Reported to law enforcement
Compliance
- Time to disclose
- 29 days(29 days from discovery to filing)
- Compliance flags
- Leak >90dME AG ≤30d · 29d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 29, 2025→ Filed with AG: Jun 27, 202529d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.