Social EngineeringFinancial ServicesFinancePhishingCustomer Data InvolvedData ExfiltratedIdentity (basic)Financial accountFinancial credentialsLowResolved

ISCENTIAL INC

bd_9d643d1d4e1f94cb · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 16, 2020

Filed

Apr 12, 2021

To disclose

21 weeks

Affected · nationwide

9562 in this filing

Linked

3 filings

Confidence

65%

Full breach record for ISCENTIAL INC →

Iscential Inc. experienced a data breach on November 16, 2020, which was also the date of discovery. The breach was a result of a phishing attack, leading to an external system compromise. The incident affected 956 individuals, compromising names and financial account information, including security codes or PINs. Affected individuals were notified in writing on April 12, 2021, and were offered 12 months of credit monitoring and identity protection services.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Nov 16, 2020 → Filed with AG Apr 12, 2021147d ✗ ME AG >90d21 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 21 weeks / 147 days

Nov 16, 2020

Begins

Nov 16, 2020

Discovered

Apr 12, 2021

Filed

vs. sector median

+13 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_51934ef08707e6962021-04-12Verified
Massachusetts State AGbd_94dec8bd8f2109062021-04-12Verified

Name: ISCENTIAL INC
norm: iscential

Name: ISCENTIAL INC
norm: iscential
Industry: Financial Servicesllm

Discovered: Nov 16, 2020
Breach occurred: Nov 16, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 12, 2021
Affected individuals: 956state + nationwide
Data types: Identity (basic)Financial accountFinancial credentials
Data elements: Financial account number
Attack vector: Phishing
MITRE ATT&CK: T1566 Phishing
Threat actor: External

During the incident: Provided 12 months of credit monitoring and identity protection services.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(147 days from discovery to filing)
Compliance flags: ME AG >90d · 147dME resident >60d · 147d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Nov 16, 2020
→ Filed with AG: Apr 12, 2021
147d 90 days ME AG >90d
Maine
Discovered: Nov 16, 2020
→ Notified: Apr 12, 2021
147d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Nov 16, 2020 → Filed with AG: Apr 12, 2021	147d	90 days	ME AG >90d
Maine	Discovered: Nov 16, 2020 → Notified: Apr 12, 2021	147d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGApr 12 · first

Massachusetts State AGApr 12 · first

Maine State AGApr 12 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/dd67e63a-2c2b-4088-9756-38272248c40d.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 12, 2021
Raw hash: 1ab002549cc34f37b4e522e6e8903ad5f42fc52924bfd6faa174b376ed0fe05f

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityISCENTIAL INC

Victim entityISCENTIAL INC

Incidentdiscovered Nov 16, 2020

Stated responseProvided 12 months of credit monitoring and identity protection services.

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov