HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHighContained
Aspiration Financial, LLC
bd_b14fd3603e2118fa · schema v1 · pii pii-v1
Full breach record for Aspiration Financial, LLC →Aspiration Financial, LLC reported an external system breach (hacking) occurring on May 20, 2021, discovered on May 21, 2021. The incident affected 14,377 total customers, including 39 Maine residents. Compromised data included names, personal identifiers, and financial account or credit/debit card numbers (with security codes, PINs, or passwords). Aspiration notified consumers electronically on June 7, 2021, and provided identity theft protection services via Mastercard.
Maine clockDiscovered May 21, 2021 → Filed with AG Jun 17, 202127d ✓ ME AG ≤30d27 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_0fbfdcccf6e110fdCalifornia State AGfiled 2021-06-16(1d gap)Verified
- bd_41e2658b55092568Montana State AGfiled 2021-06-07(10d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1b10ead4-d6f7-44c1-adf1-b5a585964e03.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 17, 2021
- Raw hash
- 8f4de2b563df44e4c753fb8e264baa95a59739a496080ba3fc318139a55bd185
Reporting entity
- Name
- Aspiration Financial, LLCnorm: aspiration financial
- Domain
- aspiration.com
Victim entity
- Name
- Aspiration Financial, LLCnorm: aspiration financial
- Domain
- aspiration.com
Incident
- Discovered
- May 21, 2021
- Materiality determined
- —
- Notification sent
- Jun 7, 2021
- Affected individuals
- 14,377
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 27 days(27 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 27d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 21, 2021→ Filed with AG: Jun 17, 202127d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.