HackingCustomer Data InvolvedTargetedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
McDermott Investment Advisers LLC, McDermott Investment Services LLC
bd_d11119e50b0c7273 · schema v1 · pii pii-v1
Full breach record for McDermott Investment Advisers LLC, McDermott Investment Services LLC →McDermott Investment Advisers LLC and McDermott Investment Services LLC experienced an external system breach (hacking) on March 2, 2022, discovered on April 4, 2022. The incident affected 718 individuals, including 42 Maine residents. Acquired data included names combined with driver's license numbers. The entity provided written notification on September 9, 2022, and offered 24 months of identity theft protection services.
Maine clockDiscovered Apr 4, 2022 → Filed with AG Sep 11, 2022160d ✗ ME AG >90d23 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed718 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/235b8634-88ae-4a4f-81d4-4f02e489dc90.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 11, 2022
- Raw hash
- 2c46f3b512c0f5e1f57ca7a98d7ad73645fb61f3632613d58ebd5e807a77f30e
Reporting entity
- Name
- McDermott Investment Advisers LLC, McDermott Investment Services LLCnorm: mcdermott investment advisers llc mcdermott investment
Victim entity
- Name
- McDermott Investment Advisers LLC, McDermott Investment Services LLCnorm: mcdermott investment advisers llc mcdermott investment
Incident
- Discovered
- Apr 4, 2022
- Materiality determined
- —
- Notification sent
- Sep 9, 2022
- Affected individuals
- 718
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 23 weeks(160 days from discovery to filing)
- Compliance flags
- ME AG >90d · 160dME resident >60d · 158d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 4, 2022→ Filed with AG: Sep 11, 2022160d 90 days ME AG >90d Maine Discovered: Apr 4, 2022→ Notified: Sep 9, 2022158d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.