HackingCustomer Data InvolvedData ExfiltratedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSMediumResolved
A
bd_c6da162dd2f1eb96 · schema v1 · pii pii-v1
An entity operating in the financial services sector experienced an external system breach, resulting in the compromise of names and financial account information, including credit/debit card numbers with their associated security codes or PINs. The incident occurred between May 18, 2022, and June 2, 2022, and was discovered on June 2, 2022. A total of 35,223 individuals were affected, including one Maine resident. Affected individuals were notified in writing on September 2, 2022, and offered 12 months of credit monitoring services through Equifax.
Maine clockDiscovered Jun 2, 2022 → Filed with AG Sep 13, 2022103d ✗ ME AG >90d15 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed35,223 affectedView incident
A leak claim by quantum about this victim predates this filing by 295 days.View originating leak claim
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ebda7912-33e5-4b37-9ba4-a8bb58e0257a.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 13, 2022
- Raw hash
- efea5d738a76d9ed66c3b2f2ff407a35190d794905b935d81909e583d313c1f1
Reporting entity
- Name
- Anorm: a
Victim entity
- Name
- Anorm: a
Incident
- Discovered
- Jun 2, 2022
- Materiality determined
- —
- Notification sent
- Sep 2, 2022
- Affected individuals
- 35,223
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 15 weeks(103 days from discovery to filing)
- Compliance flags
- ME AG >90d · 103dLeak >180dME resident >60d · 92d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 2, 2022→ Filed with AG: Sep 13, 2022103d 90 days ME AG >90d Maine Discovered: Jun 2, 2022→ Notified: Sep 2, 202292d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.