HackingCustomer Data InvolvedLow
Jeffrey W Krol & Associates
bd_adcc2022b5dd9d4e · schema v1 · pii pii-v1
Full breach record for Jeffrey W Krol & Associates →Jeffrey W. Krol and Associates, a financial services firm, reported a data breach affecting 3 Maine residents. The breach, described as an external system breach (hacking), occurred and was discovered on November 22, 2025. Affected individuals were notified on January 16, 2026, and offered 24 months of identity theft protection services through Experian.
Maine clockDiscovered Nov 22, 2025 → Filed with AG Jan 13, 202652d ⏱ ME AG >30d7 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
A leak claim by sinobi about this victim predates this filing by 36 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_216eeebc824b0e8bLeak Sitesinobifiled 2025-12-07(36d gap)Candidate
Regulatory filings (2) · sorted by filing gap
- bd_297b05d8f3f709f8Indiana State AGfiled 2026-01-13Verified
- bd_137cee464a26dd26New Hampshire State AGfiled 2026-01-12(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c8d90fe1-7835-42c6-8400-e2d58b0779d9.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 13, 2026
- Raw hash
- b962877cbb042a9696b67325ae9d6570ec013e6132801dec73dede16d0f97a1c
Reporting entity
- Name
- Jeffrey W Krol & Associatesnorm: jeffrey w krol associates
- Domain
- krolcpa.com
Victim entity
- Name
- Jeffrey W Krol & Associatesnorm: jeffrey w krol associates
- Domain
- krolcpa.com
Incident
- Discovered
- Nov 22, 2025
- Materiality determined
- —
- Notification sent
- Jan 16, 2026
- Affected individuals
- 3
- Data types
- —
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 7 weeks(52 days from discovery to filing)
- Compliance flags
- ME AG >30d · 52dLeak >30d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 22, 2025→ Filed with AG: Jan 13, 202652d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.