AccidentalFinancial ServicesFinanceMisdeliveryIdentity (basic)Government IDHighResolved

BackNine Insurance and Financial Services, Inc.

bd_a3139dfc8b843b51 · schema v1 · pii pii-v1

Severity

High

Discovered

Jul 12, 2021

Filed

Aug 18, 2021

To disclose

5 weeks

Affected · nationwide

30,51973 in this filing

Linked

8 filings

Confidence

50%

Full breach record for BackNine Insurance and Financial Services, Inc. →

BackNine Insurance and Financial Services, Inc. experienced an inadvertent disclosure of personal information. The breach, which occurred over a period from April 2015 to July 2021, resulted in the exposure of names and Social Security numbers. The company provided affected individuals with identity theft protection services.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jul 12, 2021 → Filed with AG Aug 18, 202137d ⏱ ME AG >30d5 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 2272 days

discovery → filing · 5 weeks / 37 days

Apr 23, 2015

Begins

Jul 12, 2021

Discovered

Aug 18, 2021

Filed

vs. sector median

4 wks faster

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Massachusetts State AGbd_9240e3f3f800e2792021-08-18Verified
Washington State AGbd_4ce68e7cc28dddcf2021-08-17 · +1dVerified
Oregon State AGbd_bf4eff08713081142021-08-17 · +1dVerified
California State AGbd_f6266be19daceb2c2021-08-17 · +1dVerified

Show 3 more filings ↓up to 229d gap

Indiana State AGbd_d878c5fd1831b3002021-08-13 · +5dVerified
Montana State AGbd_04b76c0a63bd345d2021-08-12 · +6dVerified
Illinois State AGbd_85596477ba14fd2e2021-01-01 · +229dCandidate

Name: BackNine Insurance and Financial Services, Inc.
norm: backnine insurance and financial

Name: BackNine Insurance and Financial Services, Inc.
norm: backnine insurance and financial
Industry: Financial Servicesllm

Discovered: Jul 12, 2021
Breach occurred: Apr 23, 2015 – Jul 12, 2021
Undetected for: 2,272 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 13, 2021
Affected individuals: 30,519state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unknown

Changes made: Offered identity theft protection services including credit monitoring, CyberScan monitoring, a $1,000,000 insurance policy, and identity recovery services.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(37 days from discovery to filing)
Compliance flags: ME AG >30d · 37d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jul 12, 2021
→ Filed with AG: Aug 18, 2021
37d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jul 12, 2021 → Filed with AG: Aug 18, 2021	37d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

Illinois State AGJan 1 · first

Montana State AG+223d

Indiana State AG+224d

Washington State AG+228d

Oregon State AG+228d

California State AG+228d

Massachusetts State AG+229d

Maine State AG+229d · this page

Pattern: first filing Jan 1 (IL), last Aug 18 (ME) — a 229-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/9e804087-f0a8-4379-8dba-07a08a66c28d.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 18, 2021
Raw hash: 827b52d26b2c0343a91cc1d76f45a3337f3ded616eabb7478cce21302408aca7

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityBackNine Insurance and Financial Services, Inc.

Victim entityBackNine Insurance and Financial Services, Inc.

Incidentdiscovered Jul 12, 2021

Stated responseOffered identity theft protection services including credit monitoring, CyberScan monitoring, a $1,000,000 insurance policy, and identity recovery services.

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov