HackingCustomer Data InvolvedPIIIDENTITY_GOVERNMENTHighContained
Optima Tax Relief
bd_bfdd7e898929542b · schema v1 · pii pii-v1
Full breach record for Optima Tax Relief →Optima Tax Relief, LLC reported an external system breach (hacking) occurring on 12/1/2019, discovered on 11/2/2022. The incident affected 5,027 individuals, including 15 Maine residents. Acquired data included names and Social Security Numbers. Optima provided 12 months of credit monitoring and identity theft recovery services via IDX to affected consumers.
Maine clockDiscovered Nov 2, 2022 → Filed with AG May 2, 2023181d ✗ ME AG >90d26 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_276ed4126dcf4cfaNew Hampshire State AGfiled 2023-05-02Verified
- bd_7f4f650e6d9a13cdVermont State AGfiled 2023-05-02Verified
- bd_9ab743fdf432f26aMontana State AGfiled 2023-05-02Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c0976e63-a29e-49aa-9df5-20d58d3e834d.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 2, 2023
- Raw hash
- 6225548e912a0c6d3203796dad768c331a04dae6cc273b4cafd29c3b69e052f7
Reporting entity
- Name
- Optima Tax Reliefnorm: optima tax relief
- Domain
- optimataxrelief.com
Victim entity
- Name
- Optima Tax Reliefnorm: optima tax relief
- Domain
- optimataxrelief.com
Incident
- Discovered
- Nov 2, 2022
- Materiality determined
- —
- Notification sent
- May 2, 2023
- Affected individuals
- 5,027
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 26 weeks(181 days from discovery to filing)
- Compliance flags
- ME AG >90d · 181dME resident >180d · 181d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 2, 2022→ Filed with AG: May 2, 2023181d 90 days ME AG >90d Maine Discovered: Nov 2, 2022→ Notified: May 2, 2023181d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.