HackingSupply Chain (3P Vendor)Customer Data InvolvedData ExfiltratedPIILowContained
Constar Financial Services, LLC
bd_d4bd802f24cc40d0 · schema v1 · pii pii-v1
Full breach record for Constar Financial Services, LLC →On June 30, 2024, an unauthorized actor gained access to computer systems at Empereon Marketing, a partner company of Constar Financial Services. The attacker accessed archived data sets containing Constar customer files. The breach was discovered on September 3, 2024, and consumer notifications were sent September 27, 2024. 19 Maine residents were among 8,578 total individuals affected. Affected individuals were offered 12 months of Equifax credit monitoring services.
Maine clockDiscovered Sep 3, 2024 → Filed with AG Sep 27, 202424d ✓ ME AG ≤30d24 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_53ad2776970efdd6Montana State AGfiled 2024-09-27Candidate
- bd_89bae39d6e7498f8Vermont State AGfiled 2024-09-27Verified
- bd_c922d491a6309634New Hampshire State AGfiled 2024-09-27Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f5625746-df54-4075-b823-0606fb3a2876.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 27, 2024
- Raw hash
- 9c516a68402969488cc6db1fcd110a07862ad6dffc20eb4477f8b951307762e0
Reporting entity
- Name
- Empereon Marketingnorm: empereon marketing
- Domain
- empereon.com
- Industry
- Other Commercial
Victim entity
- Name
- Constar Financial Services, LLCnorm: constar financial
Incident
- Discovered
- Sep 3, 2024
- Materiality determined
- —
- Notification sent
- Sep 27, 2024
- Affected individuals
- 19
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Reported to federal law enforcementReported to government regulatorsNotification filed with Maine Attorney General
- Initial access
- external_remote_services
Compliance
- Time to disclose
- 24 days(24 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 24d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 3, 2024→ Filed with AG: Sep 27, 202424d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.