HackingCustomer Data InvolvedFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained
Epik Holdings, Inc.
bd_8580b47767c5ab33 · schema v1 · pii pii-v1
Full breach record for Epik Holdings, Inc. →Epik Holdings, Inc. reported an external system breach (hacking) that occurred on September 13, 2021, and was discovered on September 15, 2021. The breach affected 190 Maine residents, part of a total of 110,000 individuals. The compromised information included names in combination with financial account numbers or credit/debit card numbers and their security codes. Epik Holdings provided electronic notification to the affected consumers on September 20, 2021, and offered two years of identity theft protection services through Experian.
Maine clockDiscovered Sep 15, 2021 → Filed with AG Sep 22, 20217d ✓ ME AG ≤30d7 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_04c8616c0dafed29California State AGfiled 2021-09-20(2d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/68401938-23c3-4279-8bc5-d4782e3cba56.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 22, 2021
- Raw hash
- 92da6cde8a7c7e3d861c7a71c58c7cb8fdb117a8d013f6ccc836e2a4ab003720
Reporting entity
- Name
- Epik Holdings, Inc.norm: epik holdings
Victim entity
- Name
- Epik Holdings, Inc.norm: epik holdings
Incident
- Discovered
- Sep 15, 2021
- Materiality determined
- —
- Notification sent
- Sep 20, 2021
- Affected individuals
- 190
- Data types
- FINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 7 days(7 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 7d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 15, 2021→ Filed with AG: Sep 22, 20217d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.