Social EngineeringPhishingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Cumberland Advisors, LLC
bd_e75969bf74119acf · schema v1 · pii pii-v1
Full breach record for Cumberland Advisors, LLC →Cumberland Advisors, Inc. reported a phishing incident affecting 1,637 individuals, including 11 Maine residents. The breach occurred on August 31, 2023, and was discovered on November 20, 2023. Personal information, including Social Security Numbers, was compromised. The company provided written notification and offered 24 months of credit monitoring and identity restoration services through Experian.
Maine clockDiscovered Nov 20, 2023 → Filed with AG Feb 14, 202486d ⏱ ME AG >30d12 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_6ab5b3b9d1b51cd8New Hampshire State AGfiled 2024-02-14Verified
- bd_27f60e7defb708fcMontana State AGfiled 2023-12-20(56d gap)Candidate
- bd_59e92d07c3db90cfMaine State AGfiled 2023-12-20(56d gap)Verified
- bd_70f1d52df37b37f8Vermont State AGfiled 2023-12-20(56d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/bcb54d32-cb12-4ad6-8337-a80a0549f9a3.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 14, 2024
- Raw hash
- b9815744621625c108f7aa58bfb01f141e2b738658355f7ff4b60547520ec9bf
Reporting entity
- Name
- Cumberland Advisors, LLCnorm: cumberland advisors
- Industry
- Financial Services
Victim entity
- Name
- Cumberland Advisors, LLCnorm: cumberland advisors
- Industry
- Financial Services
Incident
- Discovered
- Nov 20, 2023
- Materiality determined
- —
- Notification sent
- Dec 20, 2023
- Affected individuals
- 1,637
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- phishing_link
Compliance
- Time to disclose
- 12 weeks(86 days from discovery to filing)
- Compliance flags
- ME AG >30d · 86d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 20, 2023→ Filed with AG: Feb 14, 202486d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.