Social EngineeringPhishingBECData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
ELLINGTON MANAGEMENT GROUP, L.L.C.
bd_cd44060793b2c14d · schema v1 · pii pii-v1
Full breach record for ELLINGTON MANAGEMENT GROUP, L.L.C. →Ellington Management Group, LLC reported a phishing and business email compromise incident on February 18, 2022, discovered on February 24, 2022. The breach affected 2,582 individuals, including 6 Maine residents. Perpetrators acquired names and Social Security Numbers. The company provided 12 months of credit monitoring and identity restoration services through Experian IdentityWorks to affected individuals.
Maine clockDiscovered Feb 24, 2022 → Filed with AG Aug 29, 2022186d ✗ ME AG >90d27 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_3517ddbfe78c82c8Montana State AGfiled 2022-08-29Candidate
- bd_c0239d7736dd9870New Hampshire State AGfiled 2022-08-29Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1635c23d-5950-4818-bf9e-553f86af1e2b.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 29, 2022
- Raw hash
- 0eaa4d29e82627ba703756a877ffdab064615e2ad4021dc14656df208ab90f5b
Reporting entity
- Name
- ELLINGTON MANAGEMENT GROUP, L.L.C.norm: ellington management
Victim entity
- Name
- ELLINGTON MANAGEMENT GROUP, L.L.C.norm: ellington management
Incident
- Discovered
- Feb 24, 2022
- Materiality determined
- —
- Notification sent
- Aug 29, 2022
- Affected individuals
- 2,582
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1566 Phishing
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- phishing_link
Compliance
- Time to disclose
- 27 weeks(186 days from discovery to filing)
- Compliance flags
- ME AG >90d · 186dME resident >180d · 186d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 24, 2022→ Filed with AG: Aug 29, 2022186d 90 days ME AG >90d Maine Discovered: Feb 24, 2022→ Notified: Aug 29, 2022186d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.