HackingData ExfiltratedPIIMediumContained
Topstep Brokerage
bd_ac7762ff013459da · schema v1 · pii pii-v1
Full breach record for Topstep Brokerage →Topstep LLC experienced a data breach due to an external system breach (hacking), affecting 1920 individuals, including 1 Maine resident.
Maine clockDiscovered Dec 5, 2025 → Filed with AG Dec 22, 202517d ✓ ME AG ≤30d17 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 9 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- bd_0a892e5fb23ecfefIndiana State AGfiled 2025-12-22Verified
- bd_204febfe40a8a423New Hampshire State AGfiled 2025-12-22Verified
- bd_f926e2f8532bba86Indiana State AGfiled 2025-12-20(2d gap)Verified
- bd_865cfabcd1482f64Indiana State AGfiled 2025-12-30(8d gap)Verified
Show 4 more filings ↓Show fewer ↑up to 29d gap
- bd_1ba3a5d6f8186b38New Hampshire State AGfiled 2026-01-05(14d gap)Verified
- bd_feda97c361d06998Vermont State AGfiled 2026-01-16(25d gap)Verified
- bd_d103e7440b81fd37Indiana State AGfiled 2026-01-20(29d gap)Verified
- bd_e1bd3f7d6444d49fIndiana State AGfiled 2026-01-20(29d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ccc492f1-bd5f-49e6-802b-358a0b470c83.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 22, 2025
- Raw hash
- 578e35834656455b719e7d1b6e4039348d726e1ad0d9b184b51f58eea2166fce
Reporting entity
- Name
- Topstep Brokeragenorm: topstep brokerage
- Domain
- topstepbrokerage.com
Victim entity
- Name
- Topstep Brokeragenorm: topstep brokerage
- Domain
- topstepbrokerage.com
Incident
- Discovered
- Dec 5, 2025
- Materiality determined
- —
- Notification sent
- Dec 23, 2025
- Affected individuals
- 1,920
- Data types
- PII
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 17 days(17 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 17d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 5, 2025→ Filed with AG: Dec 22, 202517d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.