HackingFinancial ServicesFinanceData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDCritical

Keenan & Associates

bd_b942c1dd7f723d7c · schema v1 · pii pii-v1

Severity

Critical

Discovered

Aug 27, 2023

Filed

Apr 2, 2024

To disclose

31 weeks

Affected · nationwide

1,573,844146 in this filing

Linked

14 filings

Confidence

63%

Full breach record for Keenan & Associates →4 incidents on file

Keenan & Associates, a financial services firm, experienced an external system breach between August 21, 2023, and August 27, 2023, discovered on the end date. The incident impacted 1,573,844 individuals, compromising their names and driver's license or non-driver identification card numbers. Affected individuals were notified starting on February 5, 2024. The company offered 24 months of complimentary credit monitoring and fraud protection services as a response.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Aug 27, 2023 → Filed with AG Apr 2, 2024219d ✗ ME AG >90d31 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 6 days

discovery → filing · 31 weeks / 219 days

Aug 21, 2023

Begins

Aug 27, 2023

Discovered

Apr 2, 2024

Filed

vs. sector median

+23 wks slower

This filing is one of 14 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

New Hampshire State AGbd_5da5a4567f12d3472024-03-29 · +4dVerified by operator
California State AGbd_e5a4bff130cae61e2024-04-11 · +9dVerified by operator
California State AGbd_3baa19847fe317a92024-03-22 · +11dVerified by operator
Washington State AGbd_46415f2cecc8e6b72024-01-26 · +67dVerified

Show 6 more filings ↓up to 196d gap

New Hampshire State AGbd_63b90faa80ccda952024-01-26 · +67dVerified by operator
Maine State AGbd_8e23d2bc69a338dc2024-01-26 · +67dVerified
Oregon State AGbd_aa3df6e17abb2cee2024-01-26 · +67dVerified
California State AGbd_b5101c052f403dd42024-01-26 · +67dVerified
Vermont State AGbd_bd517874daee54a22024-01-26 · +67dVerified
California State AGbd_b81430bb11ab66382024-10-15 · +196dVerified by operator

Showing first 10 of 13 linked disclosures.

Name: Keenan & Associates
norm: keenan associates

Name: Keenan & Associates
norm: keenan associates
Industry: Financial Servicesllm

Discovered: Aug 27, 2023
Breach occurred: Aug 21, 2023 – Aug 27, 2023
Undetected for: 6 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 26, 2024
Affected individuals: 1,573,844state + nationwide
Data types: Identity (basic)Government ID
Data elements: Driver's licence number
Attack vector: Unauthorized Access

During the incident: Keenan is offering 24 months of complimentary credit monitoring and fraud protection services to these individuals.
Keenan is also providing a toll-free hotline for the individuals to call with any questions regarding the incident.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 31 weeks(219 days from discovery to filing)
Compliance flags: ME AG >90d · 219dME resident >180d · 212d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Aug 27, 2023
→ Filed with AG: Apr 2, 2024
219d 90 days ME AG >90d
Maine
Discovered: Aug 27, 2023
→ Notified: Mar 26, 2024
212d 180 days ME resident >180d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Aug 27, 2023 → Filed with AG: Apr 2, 2024	219d	90 days	ME AG >90d
Maine	Discovered: Aug 27, 2023 → Notified: Mar 26, 2024	212d	180 days	ME resident >180d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 6 states

View merged incident ↗

Washington State AGJan 26 · first

New Hampshire State AGJan 26 · first

Maine State AGJan 26 · first

Oregon State AGJan 26 · first

California State AGJan 26 · first

Vermont State AGJan 26 · first

California State AG+56d

New Hampshire State AG+63d

Maine State AG+67d · this page

California State AG+76d

California State AG+263d

Pattern: first filing Jan 26 (WA), last Oct 15 (CA) — a 263-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 13 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/2c41b24a-36c1-451d-aa99-13303efb5c68.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 2, 2024
Raw hash: 570a0d40116e9cc3d20a4c6ee35d71b6fe7cf8af8c16e5ef2bbdfaa8e9cdca71

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityKeenan & Associates

Victim entityKeenan & Associates

Incidentdiscovered Aug 27, 2023

Stated responseKeenan is offering 24 months of complimentary credit monitoring and fraud protection services to these individuals.

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov