HackingDelayed DiscoveryCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained
Cypress Capital Group, Inc.
bd_bf661269e3af4a96 · schema v1 · pii pii-v1
Full breach record for Cypress Capital Group, Inc. →Cypress Capital Group, Inc. experienced an external system breach between October 30, 2023, and October 31, 2023. The breach was discovered on January 12, 2024. The incident resulted in the unauthorized acquisition of names combined with financial account numbers or credit/debit card numbers and their associated security codes or PINs. A total of 756 individuals were affected, including one Maine resident. Notification letters were sent to affected consumers on March 22, 2024, and two years of identity theft protection services from Experian were offered.
Maine clockDiscovered Jan 12, 2024 → Filed with AG Mar 22, 202470d ⏱ ME AG >30d10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed756 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/dc2fdf37-8bf9-499c-9329-9c4490b3ca54.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 22, 2024
- Raw hash
- 125847f05405ef76f88a8e515fe2abb1082fab5aadfb72cf904cad42b81c9d1f
Reporting entity
- Name
- Cypress Capital Group, Inc.norm: cypress capital
Victim entity
- Name
- Cypress Capital Group, Inc.norm: cypress capital
Incident
- Discovered
- Jan 12, 2024
- Materiality determined
- —
- Notification sent
- Mar 22, 2024
- Affected individuals
- 756
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 10 weeks(70 days from discovery to filing)
- Compliance flags
- ME AG >30d · 70dME resident >60d · 70d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 12, 2024→ Filed with AG: Mar 22, 202470d 30 days (soft) ME AG >30d Maine Discovered: Jan 12, 2024→ Notified: Mar 22, 202470d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.