HackingHacking OtherCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsMedium

SapphireFoxxBeyond.com

bd_d2c8b8f4da6e82ad · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 12, 2020

Filed

Jan 26, 2021

To disclose

6 weeks

Affected · nationwide

2,4858 in this filing

Confidence

50%

Full breach record for SapphireFoxxBeyond.com →

SapphireFoxxBeyond.com experienced an external system breach on June 1, 2020, discovered on December 12, 2020. The breach compromised names and financial account numbers with access codes for 2,485 individuals, including 8 Maine residents. The company offered 24 months of identity theft protection services.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Dec 12, 2020 → Filed with AG Jan 26, 202145d ⏱ ME AG >30d6 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 194 days

discovery → filing · 6 weeks / 45 days

Jun 1, 2020

Begins

Dec 12, 2020

Discovered

Jan 26, 2021

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2,485 affectedView incident

Name: SapphireFoxxBeyond.com
norm: sapphirefoxxbeyondcom

Name: SapphireFoxxBeyond.com
norm: sapphirefoxxbeyondcom

Discovered: Dec 12, 2020
Breach occurred: Jun 1, 2020
Undetected for: 194 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 26, 2021
Affected individuals: 2,485state + nationwide
Data types: Identity (basic)Financial accountFinancial credentials
Data elements: Financial account number
Attack vector: Unauthorized Access
Threat actor: ExternalFinancial

Changes made: Offered 24 months of identity theft protection services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(45 days from discovery to filing)
Compliance flags: ME AG >30d · 45d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Dec 12, 2020
→ Filed with AG: Jan 26, 2021
45d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Dec 12, 2020 → Filed with AG: Jan 26, 2021	45d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/54f4f739-ed72-4475-9b8e-8feb6c12c28f.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 26, 2021
Raw hash: 05692a32ce9a39f5b5f8b8d360fbe28a77095329af447b8618bbb3fa06c1a34b

Reporting entitySapphireFoxxBeyond.com

Victim entitySapphireFoxxBeyond.com

Incidentdiscovered Dec 12, 2020

Stated responseOffered 24 months of identity theft protection services

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov