HackingTargetedIDENTITY_GOVERNMENTIDENTITY_BASICHighResolved
ECAPITAL CORP.
bd_cbb846922e6b2321 · schema v1 · pii pii-v1
Full breach record for ECAPITAL CORP. →eCapital Corp., a financial services provider, reported an external system breach occurring between April 25, 2021, and August 19, 2021. The incident compromised the personal information of 1,865 individuals, including Social Security numbers. The breach was discovered on July 22, 2021. eCapital notified affected individuals in writing on August 8, 2022, and offered 12 months of credit monitoring services.
Maine clockDiscovered Jul 22, 2021 → Filed with AG Aug 12, 2022386d ✗ ME AG >90d13 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,865 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/3054d2c4-bc29-405d-a1f1-c584579547d5.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 12, 2022
- Raw hash
- ee7ee445e52db61040e18e833fb1732335ad68a1ed26cca600a812a55502d8a8
Reporting entity
- Name
- ECAPITAL CORP.norm: ecapital
- Industry
- Financial Services
Victim entity
- Name
- ECAPITAL CORP.norm: ecapital
- Industry
- Financial Services
Incident
- Discovered
- Jul 22, 2021
- Materiality determined
- —
- Notification sent
- Aug 8, 2022
- Affected individuals
- 1,865
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed breach notification with the Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 13 months(386 days from discovery to filing)
- Compliance flags
- ME AG >90d · 386dME resident >180d · 382d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 22, 2021→ Filed with AG: Aug 12, 2022386d 90 days ME AG >90d Maine Discovered: Jul 22, 2021→ Notified: Aug 8, 2022382d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.