HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Paladin Financial
bd_bbe4e1b08cdcddb4 · schema v1 · pii pii-v1
Full breach record for Paladin Financial →Paladin Advisors, a financial services firm based in Kensington, NH, reported an external system breach (hacking) occurring on August 20, 2021, discovered on August 22, 2021. The incident affected 300 individuals total, including 8 Maine residents. Acquired data included names combined with driver's license numbers. The firm provided written notification on October 14, 2021, and offered 12 months of credit monitoring and identity restoration services through Equifax.
Maine clockDiscovered Aug 22, 2021 → Filed with AG Oct 27, 202166d ⏱ ME AG >30d9 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed300 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ab6a2dff-7840-49e4-bb51-edc21864cbf0.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 27, 2021
- Raw hash
- d88ff6c829042eb17c85d6b4d61242a53f50ab0b25691d3e983ba8de6a09517b
Reporting entity
- Name
- Paladin Advisorsnorm: paladin advisors
- Industry
- Financial Services
Victim entity
- Name
- Paladin Financialnorm: paladin financial
- Domain
- paladinfinancial.com
- Industry
- Financial Services
Incident
- Discovered
- Aug 22, 2021
- Materiality determined
- —
- Notification sent
- Oct 14, 2021
- Affected individuals
- 300
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 weeks(66 days from discovery to filing)
- Compliance flags
- ME AG >30d · 66d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 22, 2021→ Filed with AG: Oct 27, 202166d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.