HackingFinancial ServicesFinanceStolen CredentialsCapture App DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Prime Retirement Solutions, LLC
bd_85f789c95a6f80f8 · schema v1 · pii pii-v1
Full breach record for Prime Retirement Solutions, LLC →Prime Retirement Solutions, LLC (PRS), a financial services firm providing retirement and pension plan administration, discovered that an unauthorized third party gained access to one employee's Office 365 account between December 12, 2024 and March 26, 2025. The breach was discovered June 18, 2025. Data potentially exfiltrated includes name, address, date of birth, Social Security/ITIN, and financial account/routing numbers. 4,230 individuals were affected total; 5 Maine residents.
Maine clockDiscovered Jun 18, 2025 → Filed with AG Jun 26, 20258d ✓ ME AG ≤30d8 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_61a5eda607200e6cIndiana State AGfiled 2025-06-26Verified
- bd_8086ac963eb2e95aCalifornia State AGfiled 2025-06-26Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c399ee95-4a2e-4d04-9367-7f762893655f.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 26, 2025
- Raw hash
- 3b8444b6dcc9e9d28dfaa91c24726c8dd97e408e8cc43cbf210f233c29048bc8
Reporting entity
- Name
- Prime Retirement Solutions, LLCnorm: prime retirement
- Industry
- Financial Services
Victim entity
- Name
- Prime Retirement Solutions, LLCnorm: prime retirement
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Jun 18, 2025
- Materiality determined
- —
- Notification sent
- Jun 26, 2025
- Affected individuals
- 5
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Reported to law enforcementMaine Attorney General notification filed
Compliance
- Time to disclose
- 8 days(8 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 8d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 18, 2025→ Filed with AG: Jun 26, 20258d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.