DisclosureLens
Social EngineeringFinancial ServicesFinancePhishingCustomer Data InvolvedGovernment IDIdentity (basic)HighContained

Cumberland Advisors, LLC

bd_e75969bf74119acf · schema v1 · pii pii-v1

Severity

High

Discovered

Nov 20, 2023

Filed

Feb 14, 2024

To disclose

12 weeks

Affected · nationwide

1,63711 in this filing

Linked

6 filings

Confidence

66%
Full breach record for Cumberland Advisors, LLC

Cumberland Advisors, Inc. reported a phishing incident affecting 1,637 individuals, including 11 Maine residents. The breach occurred on August 31, 2023, and was discovered on November 20, 2023. Personal information, including Social Security Numbers, was compromised. The company provided written notification and offered 24 months of credit monitoring and identity restoration services through Experian.

Maine clockDiscovered Nov 20, 2023Filed with AG Feb 14, 202486d ME AG >30d12 weeks discovery → filing
AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 81 days
discovery → filing · 12 weeks / 86 days

Aug 31, 2023

Begins

Nov 20, 2023

Discovered

Feb 14, 2024

Filed

vs. sector median

+4 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filingup to 56d gap

Filing propagation · 6 filings · 5 states

View merged incident ↗
Montana State AGDec 20 · first
Maine State AGDec 20 · first
Vermont State AGDec 20 · first
Massachusetts State AGDec 20 · first
Maine State AG+56d · this page

Pattern: first filing Dec 20 (MT), last Feb 14 (ME) — a 56-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.