HackingProfessional ServicesProfessional ServicesData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)HighContained

Find Great People

bd_8d05af71016c2189 · schema v1 · pii pii-v1

Severity

High

Discovered

Jul 19, 2024

Filed

Oct 1, 2024

To disclose

11 weeks

Affected · nationwide

12,2053 in this filing

Linked

7 filings

Confidence

65%

Full breach record for Find Great People →

Find Great People experienced an external system breach (hacking) from July 2 to July 19, 2024. The incident compromised names, addresses, SSNs, driver's licenses, passports, health insurance numbers, financial account numbers, and medical information for approximately 12,205 individuals, including 3 Maine residents. FGP engaged forensic investigators, reset credentials, and enhanced security monitoring. Notices were sent on October 1, 2024, offering 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jul 19, 2024 → Filed with AG Oct 1, 202474d ⏱ ME AG >30d11 weeks discovery → filing

Incident timeline

undetected · 17 days

discovery → filing · 11 weeks / 74 days

Jul 2, 2024

Begins

Jul 19, 2024

Discovered

Oct 1, 2024

Filed

vs. sector median

8 wks faster

This filing is one of 7 about the same incident.View merged incident

A leak claim by akira about this victim predates this filing by 61 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Siteakirabd_7b0bad9a0e3cd7cd2024-11-19 · +49dVerified by operator
Leak Siteakirabd_6d28c5dcd24524d42024-07-31 · +61dCandidate

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_4c0137f919d783fb2024-10-01Verified
Massachusetts State AGbd_8f4ddefd26404c1f2024-10-01Verified by operator
South Carolina State AGbd_b83954dd660831512024-10-02 · +1dVerified
New Hampshire State AGbd_9a7dc2cc6d1fc9562024-10-07 · +6dVerified

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: Find Great People
norm: find great people
Domain: fgp.com
Industry: Professional Servicesllm

Discovered: Jul 19, 2024
Breach occurred: Jul 2, 2024 – Jul 19, 2024
Undetected for: 17 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 1, 2024
Affected individuals: 12,205state + nationwide
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
Threat actor: External
Regulator citations: Notified Maine Attorney General
Initial access: exploit_public_facing

During the incident: Disconnected all access to the network
Engaged a specialized third-party cybersecurity firm and IT personnel to conduct a forensic investigation
Implemented an organization-wide credential reset of all users
Added additional security tools including auditing firmware versions of all firewall devices and VPN clients
Added additional detection and response measures to EDR (Endpoint Detection Response) platform
Deployed foothold detection agents that actively identify malware remnants and isolate/remove them
Increased third-party monitoring
Upgraded the company network with enhanced network monitoring and security
Offered 12 months of complimentary credit monitoring and identity theft restoration services through Cyberscout
Changes made: Auditing firmware versions of all firewall devices and VPN clients
Adding additional detection and response measures to EDR platform
Deploying foothold detection agents
Upgrading company network with enhanced network monitoring and security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(74 days from discovery to filing)
Compliance flags: ME AG >30d · 74dLeak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jul 19, 2024
→ Filed with AG: Oct 1, 2024
74d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jul 19, 2024 → Filed with AG: Oct 1, 2024	74d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGOct 1 · first

Massachusetts State AGOct 1 · first

Maine State AGOct 1 · first · this page

South Carolina State AG+1d

New Hampshire State AG+6d

Pattern: first filing Oct 1 (IN), last Oct 7 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/531e5482-ce8f-4741-aef0-08a6d3c2f8be.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 1, 2024
Raw hash: 8141e6bc71f1f6393ac6bc5f6ca927411183232718a1e04f4a67999b0fae5398

Linked disclosures

Ransomware claims (2)

Regulatory filings (4) · sorted by filing gap

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityFind Great People

Incidentdiscovered Jul 19, 2024

Stated responseDisconnected all access to the network

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov