HackingCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Four Hands LLC
bd_ea6170f9dafc976a · schema v1 · pii pii-v1
Full breach record for Four Hands LLC →Four Hands, LLC reported an external system breach (hacking) occurring between Dec 27, 2023, and Jan 8, 2024, discovered on Mar 15, 2024. The incident affected 1,472 individuals, including 2 Maine residents. Acquired data included names and financial account numbers. The company notified affected individuals in writing on May 16, 2024, and offered 12 months of credit monitoring via Experian.
Maine clockDiscovered Mar 15, 2024 → Filed with AG May 16, 202462d ⏱ ME AG >30d9 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 2 about the same incident.View merged incident
A leak claim by 0mega about this victim predates this filing by 112 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_162b55880708eea0Leak Site0megafiled 2024-01-25(112d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c49838f7-af85-4a41-b489-be6c8b482c81.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 16, 2024
- Raw hash
- a89a767c4ea2b24363dd1952f099b8a652c81e6c074ec13f90a4cf627455f9e0
Reporting entity
- Name
- Four Hands LLCnorm: four hands
- Domain
- fourhands.com
Victim entity
- Name
- Four Hands LLCnorm: four hands
- Domain
- fourhands.com
Incident
- Discovered
- Mar 15, 2024
- Materiality determined
- —
- Notification sent
- May 16, 2024
- Affected individuals
- 1,472
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 weeks(62 days from discovery to filing)
- Compliance flags
- ME AG >30d · 62dME resident >60d · 62dLeak >90d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 15, 2024→ Filed with AG: May 16, 202462d 30 days (soft) ME AG >30d Maine Discovered: Mar 15, 2024→ Notified: May 16, 202462d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.