HackingCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowResolved
Wing Financial Services
bd_ea86ace32dbbea5d · schema v1 · pii pii-v1
Full breach record for Wing Financial Services →Wing Financial Services experienced an external system breach, which was discovered on August 9, 2022. The breach occurred between September 2020 and January 2022, affecting 2 Maine residents. The compromised information included names combined with financial account numbers or credit/debit card numbers along with their security codes or PINs. Affected individuals were notified on December 1, 2022, and offered 12 months of credit monitoring and identity theft protection services from Cyberscout.
Maine clockDiscovered Aug 9, 2022 → Filed with AG Mar 15, 2023218d ✗ ME AG >90d31 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_97c60aad9fad22eeMaine State AGfiled 2022-12-30(75d gap)Verified
- bd_dd0eab397cd0f931New Hampshire State AGfiled 2022-12-05(100d gap)Verified
- bd_222b5057f3b0599eMontana State AGfiled 2022-12-01(104d gap)Candidate
- bd_6dc3ef53bf4e5cbaMaine State AGfiled 2022-12-01(104d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/4f7ee12f-ca64-4c02-b4ce-f13219355b02.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 15, 2023
- Raw hash
- 07fd4ee77ff618b0b6473a8e14abc6b268a9083ac842056ab0bd1616024641ed
Reporting entity
- Name
- Wing Financial Servicesnorm: wing financial
- Industry
- Financial Services
Victim entity
- Name
- Wing Financial Servicesnorm: wing financial
- Industry
- Financial Services
Incident
- Discovered
- Aug 9, 2022
- Materiality determined
- —
- Notification sent
- Dec 1, 2022
- Affected individuals
- 2
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 31 weeks(218 days from discovery to filing)
- Compliance flags
- ME AG >90d · 218dME resident >60d · 114d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 9, 2022→ Filed with AG: Mar 15, 2023218d 90 days ME AG >90d Maine Discovered: Aug 9, 2022→ Notified: Dec 1, 2022114d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.