UnknownCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLow
Johnson & Company, CPAs
bd_ac3bf90892f2fffa · schema v1 · pii pii-v1
Full breach record for Johnson & Company, CPAs →Financial services firm Johnson & Company, CPAs reported a data breach affecting 42 individuals, including 37 Maine residents. The breach, which occurred and was discovered on May 1, 2023, involved the compromise of names or other personal identifiers in combination with financial account numbers or credit/debit card numbers. Affected individuals were notified on July 31, 2023, and offered 12 months of credit and identity protection services through Kroll.
Maine clockDiscovered May 1, 2023 → Filed with AG Aug 11, 2023102d ✗ ME AG >90d15 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed37 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/73c7b567-16ce-49a2-96bf-8223a74f428a.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 11, 2023
- Raw hash
- a0e3090f2581f0adf132a987880ab543b3bad6bade03749dfa63a14094aa88b1
Reporting entity
- Name
- Johnson & Company, CPAsnorm: johnson company cpas
Victim entity
- Name
- Johnson & Company, CPAsnorm: johnson company cpas
Incident
- Discovered
- May 1, 2023
- Materiality determined
- —
- Notification sent
- Jul 31, 2023
- Affected individuals
- 37
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unknown
Compliance
- Time to disclose
- 15 weeks(102 days from discovery to filing)
- Compliance flags
- ME AG >90d · 102dME resident >60d · 91d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 1, 2023→ Filed with AG: Aug 11, 2023102d 90 days ME AG >90d Maine Discovered: May 1, 2023→ Notified: Jul 31, 202391d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.