HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Cayan, LLC
bd_8cec46a434362ca6 · schema v1 · pii pii-v1
Full breach record for Cayan, LLC →Cayan, LLC reported an external system breach (hacking) occurring between October 29, 2020, and November 18, 2020. The incident compromised the personal information of 303 individuals, including one Maine resident. The data acquired consisted of names and Social Security Numbers. Cayan notified affected individuals on February 19, 2021, and provided two years of complimentary credit monitoring and identity theft protection services through Equifax.
Maine clockDiscovered Nov 16, 2020 → Filed with AG Feb 19, 202195d ✗ ME AG >90d14 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed303 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ccffdab3-0e76-410d-951b-437f9465dc8a.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 19, 2021
- Raw hash
- dbd29c7b2ad4b7f43e6ecce3c9f37a96b7c8d1c149bad531936c77bf5484e99d
Reporting entity
- Name
- Cayan, LLCnorm: cayan
- Industry
- Financial Services
Victim entity
- Name
- Cayan, LLCnorm: cayan
- Industry
- Financial Services
Incident
- Discovered
- Nov 16, 2020
- Materiality determined
- —
- Notification sent
- Feb 19, 2021
- Affected individuals
- 303
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 14 weeks(95 days from discovery to filing)
- Compliance flags
- ME AG >90d · 95dME resident >60d · 95d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 16, 2020→ Filed with AG: Feb 19, 202195d 90 days ME AG >90d Maine Discovered: Nov 16, 2020→ Notified: Feb 19, 202195d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.