HackingFinancial ServicesFinanceData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIILowResolved
The Pension Specialist
bd_e7b493c4af3c76d3 · schema v1 · pii pii-v1
Full breach record for The Pension Specialist →The Pension Specialist (TPS), a third-party administrator for retirement plan compliance, experienced a network disruption beginning February 18, 2024. Unauthorized actors may have accessed or acquired certain files between February 18–23, 2024. The incident was discovered on February 24, 2024, but personal information involvement was not confirmed until December 16, 2024. 140,995 individuals were affected total; 101 Maine residents. Kroll identity monitoring (12 months) was offered.
Maine clockDiscovered Mar 21, 2025 → Filed with AG Mar 26, 20255d ✓ ME AG ≤30d5 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed101 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f62b4b15-e167-43f1-a75e-ec8a71a2845a.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 26, 2025
- Raw hash
- 266bcc769b8b2d2cb4c1103800a73fbaa24943262ab505b3da9e6e5c6a1e101c
Reporting entity
- Name
- The Pension Specialistnorm: the pension specialist
- Industry
- Financial Services
Victim entity
- Name
- The Pension Specialistnorm: the pension specialist
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Mar 21, 2025
- Materiality determined
- Dec 16, 2024
- Notification sent
- Mar 26, 2025
- Affected individuals
- 101
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Maine Attorney General
Compliance
- Time to disclose
- 5 days(5 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 5d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 21, 2025→ Filed with AG: Mar 26, 20255d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.