HackingOtherStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedWire FraudData ExfiltratedPIIIDENTITY_GOVERNMENTMediumContained
Garson Brothers Asset Management, LLC
bd_cb3f8ddff569a791 · schema v1 · pii pii-v1
Full breach record for Garson Brothers Asset Management, LLC →Garson Brothers Asset Management LLC, a New York-based property management company, experienced an unauthorized access incident on or around May 1, 2025, when an unknown external actor gained access to an employee's email account. The actor's apparent goal was wire fraud. The review concluded September 12, 2025. One Maine resident was affected; compromised data included name and Social Security number. Kroll credit monitoring (12 months) was offered to affected individuals.
Maine clockDiscovered May 1, 2025 → Filed with AG Sep 24, 2025146d ✗ ME AG >90d21 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d1d6864c-a214-4d96-9515-b87c737296af.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 24, 2025
- Raw hash
- cfb017d94684407d9654add75846759abe622d4bb54fc39ba7a8eb4c5d2855a5
Reporting entity
- Name
- Garson Brothers Asset Management, LLCnorm: garson brothers asset management
- Industry
- Property Management
Victim entity
- Name
- Garson Brothers Asset Management, LLCnorm: garson brothers asset management
- Industry
- Property Management
- Industry
- Otherllm
Incident
- Discovered
- May 1, 2025
- Materiality determined
- Sep 12, 2025
- Notification sent
- Sep 16, 2025
- Affected individuals
- 1
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1566 Phishing
- Threat actor
- ExternalFinancial
- Regulator citations
- Maine Attorney General
Compliance
- Time to disclose
- 21 weeks(146 days from discovery to filing)
- Compliance flags
- ME AG >90d · 146dME resident >60d · 138d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 1, 2025→ Filed with AG: Sep 24, 2025146d 90 days ME AG >90d Maine Discovered: May 1, 2025→ Notified: Sep 16, 2025138d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.