DisclosureLens
HackingFinancial ServicesFinanceCustomer Data InvolvedGovernment IDMedium

Advance America, Cash Advance Centers of New Hampshire, Inc.

bd_9a9395202256221c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 7, 2023

Filed

Sep 7, 2023

To disclose

30 weeks

Affected

515state residents only

Linked

2 filings

Confidence

75%
Full breach record for Advance America, Cash Advance Centers of New Hampshire, Inc. →

Advance America, Cash Advance Centers of New Hampshire, Inc. reported a data breach to the Maine Attorney General, stating that an external system breach (hacking) occurred on February 7, 2023. The breach, which was discovered the same day, affected 515 Maine residents. The compromised information includes names and driver's license or non-driver identification card numbers. The company began notifying affected individuals on August 15, 2023, and is offering 12 months of identity theft and credit monitoring services through Kroll.

Maine clockDiscovered Feb 7, 2023 → Filed with AG Sep 7, 2023212d ✗ ME AG >90d30 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 30 weeks / 212 days

Feb 7, 2023

Begins

Feb 7, 2023

Discovered

Sep 7, 2023

Filed

vs. sector median

+22 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings · 2 states

View merged incident ↗
New Hampshire State AGAug 21 · first
Maine State AG+17d · this page

Pattern: first filing Aug 21 (NH), last Sep 7 (ME) — a 17-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.