HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
CYPREXX SERVICES, LLC
bd_e9edef0635b4f094 · schema v1 · pii pii-v1
Full breach record for CYPREXX SERVICES, LLC →Cyprexx Services, LLC, a financial services provider, reported an external system breach (hacking) occurring between May 20 and June 10, 2021, discovered on September 15, 2021. The incident compromised names and Social Security Numbers of 432 individuals, including 3 Maine residents. Cyprexx provided 12 months of credit monitoring and identity restoration services through Experian to affected parties.
Maine clockDiscovered Sep 15, 2021 → Filed with AG Nov 10, 202156d ⏱ ME AG >30d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_07fce5b60e797ab2Montana State AGfiled 2021-11-10Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/10103643-d37b-4f2e-9519-9a10b848af80.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 10, 2021
- Raw hash
- 2ac34b48a6cdedb1688d7356646915ef1028dcc580e664a947968bfaa860b302
Reporting entity
- Name
- CYPREXX SERVICES, LLCnorm: cyprexx services
- Domain
- cyprexx.com
Victim entity
- Name
- CYPREXX SERVICES, LLCnorm: cyprexx services
- Domain
- cyprexx.com
Incident
- Discovered
- Sep 15, 2021
- Materiality determined
- —
- Notification sent
- Nov 10, 2021
- Affected individuals
- 432
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 8 weeks(56 days from discovery to filing)
- Compliance flags
- ME AG >30d · 56d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 15, 2021→ Filed with AG: Nov 10, 202156d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.