MalwareRansomwareRansom DemandedCustomer Data InvolvedFINANCIAL_ACCOUNTLowContained
CLEAR SPRING LIFE AND ANNUITY COMPANY
bd_e442a82652e5886f · schema v1 · pii pii-v1
Full breach record for CLEAR SPRING LIFE AND ANNUITY COMPANY →Clear Spring Life and Annuity Company reported a ransomware incident that was discovered on February 9, 2023. The breach, which also occurred on the same day, affected 10 Maine residents. The compromised information includes financial account numbers or credit/debit card numbers in combination with security codes, access codes, passwords, or PINs. The company offered 24 months of identity theft protection services through IDX.
Maine clockDiscovered Feb 9, 2023 → Filed with AG Jul 27, 2023168d ✗ ME AG >90d24 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_562bfc8b2b4e7672Vermont State AGfiled 2023-07-28(1d gap)Verified
- bd_5e61e7a7d8f25a37Washington State AGfiled 2023-07-28(1d gap)Verified
- bd_6c605cbed2da15faOregon State AGfiled 2023-07-28(1d gap)Verified
- bd_c2598206d5a6fc7eCalifornia State AGfiled 2023-07-28(1d gap)Verified
Show 3 more filings ↓Show fewer ↑up to 117d gap
- bd_438eed640d65eb66Oregon State AGfiled 2023-11-21(117d gap)Verified
- bd_93aa52da49699337California State AGfiled 2023-11-21(117d gap)Verified
- bd_e794c69d4eb74adaCalifornia State AGfiled 2023-11-21(117d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/5f16f55f-42b7-458f-a916-2603c9f83bb7.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 27, 2023
- Raw hash
- 32b9effb8535549fcc4a2cc5770fc1e82eedda8c2b5ce5d839746fdeb318b5b4
Reporting entity
- Name
- CLEAR SPRING LIFE AND ANNUITY COMPANYnorm: clear spring life and annuity
Victim entity
- Name
- CLEAR SPRING LIFE AND ANNUITY COMPANYnorm: clear spring life and annuity
Incident
- Discovered
- Feb 9, 2023
- Materiality determined
- —
- Notification sent
- Jul 28, 2023
- Affected individuals
- 10
- Data types
- FINANCIAL_ACCOUNT
- Attack vector
- Ransomware
Compliance
- Time to disclose
- 24 weeks(168 days from discovery to filing)
- Compliance flags
- ME AG >90d · 168dME resident >60d · 169d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 9, 2023→ Filed with AG: Jul 27, 2023168d 90 days ME AG >90d Maine Discovered: Feb 9, 2023→ Notified: Jul 28, 2023169d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.