HackingVulnerability ExploitPIIIDENTITY_GOVERNMENTMediumContained
CUSO Financial Services, L.P.
bd_9c6021565739f156 · schema v1 · pii pii-v1
Full breach record for CUSO Financial Services, L.P. →CUSO Financial Services, LP reported a data breach affecting 7 Maine residents as a result of a vulnerability in their Barracuda Message Archiver. The breach, which occurred on July 5, 2022 and was discovered on February 1, 2024, resulted in the compromise of names and Social Security numbers. The company began notifying affected individuals on February 16, 2024 and offered them 12 months of credit monitoring and identity theft services.
Maine clockDiscovered Feb 1, 2024 → Filed with AG Feb 16, 202415d ✓ ME AG ≤30d15 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_5e7d3bbb2432fd7dIndiana State AGfiled 2024-02-16Verified
- bd_8322500873ed6ac4Montana State AGfiled 2024-02-16Candidate
- bd_efcb6767e0e2d826New Hampshire State AGfiled 2024-02-16Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/5b83074d-433f-422c-a3ea-4fe238cf3a81.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 16, 2024
- Raw hash
- d6f81d116ddb2c5a33df857fd55079d6cbeb6555fb389d48a5d58fbfea1b8c76
Reporting entity
- Name
- CUSO Financial Services, L.P.norm: cuso financial
Victim entity
- Name
- CUSO Financial Services, L.P.norm: cuso financial
Incident
- Discovered
- Feb 1, 2024
- Materiality determined
- —
- Notification sent
- Feb 16, 2024
- Affected individuals
- 7
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 15 days(15 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 15d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 1, 2024→ Filed with AG: Feb 16, 202415d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.