HackingStolen CredentialsCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Hamilton Investment Group, LLC
bd_be0de743b1729f9f · schema v1 · pii pii-v1
Full breach record for Hamilton Investment Group, LLC →Hamilton Investment Group LLC reported an internal system breach on September 20, 2023, affecting 1,543 individuals, including 3 Maine residents. The incident involved unauthorized access to systems containing names and driver's license numbers. The company notified affected individuals in writing on January 18, 2024, and provided 12 months of Experian’s IdentityWorks identity protection services.
Maine clockDiscovered Sep 20, 2023 → Filed with AG Jan 18, 2024120d ✗ ME AG >90d17 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_8a128a1b5d7c82cdIndiana State AGfiled 2024-01-18Verified
- bd_c28ee9a52fa7bbffVermont State AGfiled 2024-01-18Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/18140d9f-df71-4bba-82d8-46fcb65445c0.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 18, 2024
- Raw hash
- c7071e9f4884c5c248ec484dc4a8eb49ea4948c4e4567acb5fc20dcb3a15103a
Reporting entity
- Name
- Hamilton Investment Group, LLCnorm: hamilton investment
Victim entity
- Name
- Hamilton Investment Group, LLCnorm: hamilton investment
Incident
- Discovered
- Sep 20, 2023
- Materiality determined
- —
- Notification sent
- Jan 18, 2024
- Affected individuals
- 1,543
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 17 weeks(120 days from discovery to filing)
- Compliance flags
- ME AG >90d · 120dME resident >60d · 120d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 20, 2023→ Filed with AG: Jan 18, 2024120d 90 days ME AG >90d Maine Discovered: Sep 20, 2023→ Notified: Jan 18, 2024120d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.