MultipleFinancial ServicesFinancePretextingStolen CredentialsCapture Stored DataRansomwareMulti-Stage ChainData ExfiltratedData EncryptedCustomer Data InvolvedEmployee Data InvolvedDelayed DiscoveryTargetedPIIFINANCIALEMPLOYMENTLowContained
Insight Partners
bd_df923439e078e2f6 · schema v1 · pii pii-v1
Full breach record for Insight Partners →Insight Partners, a New York-based financial services firm, experienced a breach beginning on or around October 25, 2024, discovered on January 16, 2025. A threat actor used a sophisticated social engineering attack to gain unauthorized access to HR and finance systems, exfiltrated data, and then encrypted servers. The actor was expelled on January 16, 2025. 25 Maine residents among 12,657 total individuals were affected. Kroll credit monitoring (12 months) was offered.
Maine clockDiscovered Jan 16, 2025 → Filed with AG Sep 16, 2025243d ✗ ME AG >90d35 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_64d25387317d3825California State AGfiled 2025-09-15(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/6e8d4d1e-a895-468d-bd52-cb59ce501364.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 16, 2025
- Raw hash
- 73bf443b7a805633fc8c7a70d1043481b8632847fa6afa6762a12ef9bf4d0f9c
Reporting entity
- Name
- Insight Partnersnorm: insight partners
- Domain
- insightpartners.com
- Industry
- Financial Services
Victim entity
- Name
- Insight Partnersnorm: insight partners
- Domain
- insightpartners.com
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Jan 16, 2025
- Materiality determined
- —
- Notification sent
- Sep 2, 2025
- Affected individuals
- 25
- Data types
- PIIFINANCIALEMPLOYMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1566 PhishingT1078 Valid AccountsT1041 Exfiltration Over C2 ChannelT1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Regulator citations
- law enforcement notifiedregulatory authorities in relevant jurisdictions notified
- Initial access
- phishing_link
Compliance
- Time to disclose
- 35 weeks(243 days from discovery to filing)
- Compliance flags
- ME AG >90d · 243dME resident >180d · 229d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 16, 2025→ Filed with AG: Sep 16, 2025243d 90 days ME AG >90d Maine Discovered: Jan 16, 2025→ Notified: Sep 2, 2025229d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.