HackingFinancial ServicesFinanceData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)HighContained

Plybon & Associates

bd_ce95130922ab02b7 · schema v1 · pii pii-v1

Severity

High

Discovered

Aug 21, 2020

Filed

Oct 9, 2020

To disclose

7 weeks

Affected · nationwide

2,1911 in this filing

Linked

2 filings

Confidence

64%

Full breach record for Plybon & Associates →

Plybon & Associates, a financial services firm, reported an external system breach (hacking) occurring between May 12 and June 4, 2020, discovered on August 21, 2020. The incident affected 2,191 individuals, including one Maine resident. Personal information acquired included names combined with Social Security Numbers. The entity provided written notification and offered identity theft protection services.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Aug 21, 2020 → Filed with AG Oct 9, 202049d ⏱ ME AG >30d7 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 101 days

discovery → filing · 7 weeks / 49 days

May 12, 2020

Begins

Aug 21, 2020

Discovered

Oct 9, 2020

Filed

vs. sector median

2 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_efe92f23d1d9d1e62020-09-18 · +21dVerified

Name: Plybon & Associates
norm: plybon associates
Industry: Financial Services

Name: Plybon & Associates
norm: plybon associates
Industry: Financial Services
Industry: Financial Servicesllm

Discovered: Aug 21, 2020
Breach occurred: May 12, 2020 – Jun 4, 2020
Undetected for: 101 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 18, 2020
Affected individuals: 2,191state + nationwide
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Regulator citations: Filed data breach notice with Maine Attorney General
Initial access: exploit_public_facing

During the incident: Sent written notification to affected individuals
Offered identity theft protection services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(49 days from discovery to filing)
Compliance flags: ME AG >30d · 49d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Aug 21, 2020
→ Filed with AG: Oct 9, 2020
49d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Aug 21, 2020 → Filed with AG: Oct 9, 2020	49d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGSep 18 · first

Maine State AG+21d · this page

Pattern: first filing Sep 18 (IN), last Oct 9 (ME) — a 21-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/12dbc0ec-7eee-4050-bec1-91363a747aad.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 9, 2020
Raw hash: cb2238ed88067997d13191dca9332e0d423ac955bf7b4e19a0fa2a69d130a243

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityPlybon & Associates

Victim entityPlybon & Associates

Incidentdiscovered Aug 21, 2020

Stated responseSent written notification to affected individuals

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov