HackingTechnologyInformationStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Kafene

bd_ec7798d922f15113 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 22, 2024

Filed

Nov 13, 2025

To disclose

—

Affected

19state residents only

Linked

7 filings

Confidence

67%

Full breach record for Kafene →

Kafene, Inc. notified the Maryland Attorney General of a data security incident discovered on November 22, 2024. An unauthorized actor gained access to the network and potentially downloaded files containing personal information, including names, SSNs, driver's license numbers, passport numbers, and dates of birth. 19 Maryland residents were notified. Kafene engaged forensic investigators, reported the incident to the FBI, and provided credit and identity monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 22, 2024

Discovered

Nov 13, 2025

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Massachusetts State AGbd_433c165b3d7df99b2025-01-13 · +304dVerified
California State AGbd_e0631a1a712781302025-01-13 · +304dVerified
New Hampshire State AGbd_eebdc0866f0d671b2025-01-13 · +304dVerified
Maine State AGbd_19933197fa29ce072025-01-10 · +307dVerified

Show 2 more filings ↓up to 309d gap

Indiana State AGbd_a65a765677f5f88d2025-01-08 · +309dCandidate
Nebraska State AGbd_f94e478a1e5ce4a72025-01-08 · +309dVerified

Name: Constangy, Brooks, Smith & Prophete, LLP
norm: constangy brooks smith prophete

Name: Kafene
norm: kafene
Domain: kafene.com
Industry: Technologyllm

Discovered: Nov 22, 2024
Materiality determined: —
Notification sent: Jan 8, 2024
Affected individuals: 19state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Reported the incident to the FBI
Initial access: valid_credentials

During the incident: Engaged a leading, independent digital forensics firm to investigate
Secured the network environment
Reported the incident to the FBI
Cooperated with any resulting investigation
Established a toll-free call center through IDX
Provided complimentary credit and identity protection services
Changes made: Implemented measures to enhance the security of its environment
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Indiana State AGJan 8 · first

Nebraska State AGJan 8 · first

Maine State AG+2d

Massachusetts State AG+5d

California State AG+5d

New Hampshire State AG+5d

Maryland State AG+309d · this page

Pattern: first filing Jan 8 (IN), last Nov 13 (MD) — a 309-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376182.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 13, 2025
Raw hash: 075d8aa518a40d8fabfd21a4f7de430b8565d088d2e75b604929e4d3bce08cc9

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityConstangy, Brooks, Smith & Prophete, LLP

Victim entityKafene

Incidentdiscovered Nov 22, 2024

Stated responseEngaged a leading, independent digital forensics firm to investigate

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov