DisclosureLens
HackingFinancial ServicesFinanceCustomer Data InvolvedGovernment IDHighContained

Kevin Bull

bd_8f33d68f06bdffd6 · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 23, 2021

Filed

Jul 14, 2021

To disclose

21 days

Affected · nationwide

1,9681 in this filing

Confidence

50%
Full breach record for Kevin Bull →

Kevin Bull, Inc., a financial services company, reported a data breach to the Maine Attorney General. The breach, an external system hacking incident, occurred between December 1, 2012, and November 30, 2020, and was discovered on June 23, 2021. The breach affected 1,968 individuals in total, including one resident of Maine. The compromised information included names combined with driver's license or non-driver identification card numbers. The company provided written notification to affected consumers on July 14, 2021, and offered one year of credit monitoring and identity theft protection services through Kroll.

Maine clockDiscovered Jun 23, 2021 → Filed with AG Jul 14, 202121d ✓ ME AG ≤30d21 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 3126 days
discovery → filing · 21 days

Dec 1, 2012

Begins

Jun 23, 2021

Discovered

Jul 14, 2021

Filed

vs. sector median

5 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,968 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.