HackingFinancial ServicesFinanceIdentity (basic)Government IDHigh

The Franklin Mutual Insurance Group

bd_dced8e85809c411a · schema v1 · pii pii-v1

Severity

High

Discovered

Mar 11, 2023

Filed

Nov 6, 2023

To disclose

34 weeks

Affected · nationwide

4,5073 in this filing

Linked

5 filings

Confidence

50%

Full breach record for The Franklin Mutual Insurance Group →2 incidents on file

The Franklin Mutual Insurance Group reported an external system breach that occurred and was discovered on March 11, 2023. The breach affected 3 Maine residents, whose names and Social Security numbers were acquired. The company notified affected individuals on November 6, 2023, and offered 12 months of credit monitoring and identity theft recovery services.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Mar 11, 2023 → Filed with AG Nov 6, 2023240d ✗ ME AG >90d34 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 34 weeks / 240 days

Mar 11, 2023

Begins

Mar 11, 2023

Discovered

Nov 6, 2023

Filed

vs. sector median

+26 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

New Hampshire State AGbd_642c5f3fadfee06a2023-11-06Verified
Vermont State AGbd_72eb60e70797dc532023-11-06Verified
Massachusetts State AGbd_d566e8c46f0087032023-11-06Verified
New Hampshire State AGbd_abd5f58c0362dc372023-07-13 · +116dCandidate

Name: The Franklin Mutual Insurance Group
norm: the franklin mutual insurance

Name: The Franklin Mutual Insurance Group
norm: the franklin mutual insurance
Industry: Financial Servicesllm

Discovered: Mar 11, 2023
Breach occurred: Mar 11, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 6, 2023
Affected individuals: 4,507state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
Threat actor: External

Changes made: Offered 12 months of single bureau credit monitoring and fully managed identity theft recovery services provided by ID Resolution, LLC.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 34 weeks(240 days from discovery to filing)
Compliance flags: ME AG >90d · 240dME resident >60d · 240d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Mar 11, 2023
→ Filed with AG: Nov 6, 2023
240d 90 days ME AG >90d
Maine
Discovered: Mar 11, 2023
→ Notified: Nov 6, 2023
240d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Mar 11, 2023 → Filed with AG: Nov 6, 2023	240d	90 days	ME AG >90d
Maine	Discovered: Mar 11, 2023 → Notified: Nov 6, 2023	240d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 4 states

View merged incident ↗

New Hampshire State AGJul 13 · first

New Hampshire State AG+116d

Vermont State AG+116d

Massachusetts State AG+116d

Maine State AG+116d · this page

Pattern: first filing Jul 13 (NH), last Nov 6 (ME) — a 116-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a5986015-6b48-4d64-b853-fc78e2d481bc.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 6, 2023
Raw hash: 2e1ffbbaf7bc1c3d32a8128a4caae7ea9eae285dbb4b440865f066b6224bb235

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityThe Franklin Mutual Insurance Group

Victim entityThe Franklin Mutual Insurance Group

Incidentdiscovered Mar 11, 2023

Stated responseOffered 12 months of single bureau credit monitoring and fully managed identity theft recovery services provided by ID Resolution, LLC.

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov