Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTMediumResolved
Georgetown DC
bd_86957beedc88dd92 · schema v1 · pii pii-v1
Full breach record for Georgetown DC →Georgetown Financial Group reported an email compromise incident occurring between Jan 30 and Feb 1, 2023, discovered on June 6, 2023. The breach affected 466 individuals, including 2 Maine residents, exposing names and Social Security Numbers. The company notified affected individuals in writing on Aug 11, 2023, and provided 12 months of credit monitoring and identity theft services via Experian.
Maine clockDiscovered Jun 6, 2023 → Filed with AG Aug 11, 202366d ⏱ ME AG >30d9 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_5e20de845b90b137New Hampshire State AGfiled 2023-09-20(40d gap)Verified
- bd_7113f068babf834aMontana State AGfiled 2023-09-20(40d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/fc84b3a6-46d9-4f54-8774-f6f093f94a1e.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 11, 2023
- Raw hash
- b257ab6d2a35c1585e82235508b31fa4aad7b0cbcac0a7e30a7c2f4c51fdd0f1
Reporting entity
- Name
- Georgetown DCnorm: georgetown dc
- Domain
- georgetowndc.com
- Industry
- Financial Services
Victim entity
- Name
- Georgetown DCnorm: georgetown dc
- Domain
- georgetowndc.com
- Industry
- Financial Services
Incident
- Discovered
- Jun 6, 2023
- Materiality determined
- —
- Notification sent
- Aug 11, 2023
- Affected individuals
- 466
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- phishing_link
Compliance
- Time to disclose
- 9 weeks(66 days from discovery to filing)
- Compliance flags
- ME AG >30d · 66dME resident >60d · 66d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 6, 2023→ Filed with AG: Aug 11, 202366d 30 days (soft) ME AG >30d Maine Discovered: Jun 6, 2023→ Notified: Aug 11, 202366d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.