DisclosureLens
HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedCredentialsIdentity (basic)Financial accountLowContained

FloatMe

bd_cb846b9a1a775990 · schema v1 · pii pii-v1

Severity

Low

Discovered

Dec 9, 2025

Filed

Jan 6, 2026

To disclose

28 days

Affected · nationwide

4011 in this filing

Linked

4 filings

Confidence

65%
Full breach record for FloatMe →

FloatMe, Corp. reported an external system breach (hacking) occurring between Dec 8-11, 2025. Malicious actors used stolen login credentials to access accounts. Affected data included credentials, mailing addresses, phone numbers, partial bank/debit card numbers, and recent financial transactions. 401 individuals affected (1 in Maine). Notifications sent Jan 6, 2026. Remediation included password resets, access termination, and MFA recommendations.

Maine clockDiscovered Dec 9, 2025 → Filed with AG Jan 6, 202628d ✓ ME AG ≤30d28 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 1 days
discovery → filing · 28 days

Dec 8, 2025

Begins

Dec 9, 2025

Discovered

Jan 6, 2026

Filed

vs. sector median

4 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Filing propagation · 4 filings · 4 states

View merged incident ↗
Indiana State AGJan 5 · first
Massachusetts State AG+1d
New Hampshire State AG+1d
Maine State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.