HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Noblr Reciprocal Exchange
bd_bc73eb4b9fc8a844 · schema v1 · pii pii-v1
Full breach record for Noblr Reciprocal Exchange →Noblr Reciprocal Exchange experienced an external system breach (hacking) on January 21, 2021, discovered on January 27, 2021. The incident compromised the names and driver's license numbers of 97,633 individuals, including 68 Maine residents. The entity provided written notification on May 14, 2021, and offered one year of Experian IdentityWorks identity protection services.
Maine clockDiscovered Jan 27, 2021 → Filed with AG May 7, 2021100d ✗ ME AG >90d14 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed97,633 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c43bf2a1-cea9-45fa-81bf-47d299a7216d.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 7, 2021
- Raw hash
- 86b58ad69e74bee60174db9f85f2cc640a31fca702416a095c332b8ef5364578
Reporting entity
- Name
- Noblr, Inc.norm: noblr
- Industry
- Financial Services
Victim entity
- Name
- Noblr Reciprocal Exchangenorm: noblr reciprocal exchange
- Industry
- Financial Services
Incident
- Discovered
- Jan 27, 2021
- Materiality determined
- —
- Notification sent
- May 14, 2021
- Affected individuals
- 97,633
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 14 weeks(100 days from discovery to filing)
- Compliance flags
- ME AG >90d · 100dME resident >60d · 107d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 27, 2021→ Filed with AG: May 7, 2021100d 90 days ME AG >90d Maine Discovered: Jan 27, 2021→ Notified: May 14, 2021107d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.