HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Strategic Benefits Advisors, Inc.
bd_ee70dc26578ff3cb · schema v1 · pii pii-v1
Full breach record for Strategic Benefits Advisors, Inc. →Strategic Benefits Advisors, Inc. reported an external system breach (hacking) occurring on September 18, 2021, discovered on October 11, 2021. The incident affected 36,047 individuals, including 62 Maine residents. Acquired data included names and Social Security Numbers. The company provided written notification and offered 24 months of credit monitoring and identity restoration through Experian.
Maine clockDiscovered Oct 11, 2021 → Filed with AG Oct 28, 202117d ✓ ME AG ≤30d17 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_18a8bd76f672839bCalifornia State AGfiled 2021-11-05(8d gap)Candidate
- bd_eea9a1cc29958d4eSouth Carolina State AGfiled 2021-11-08(11d gap)Verified
- bd_757fc0172a308c29Montana State AGfiled 2021-11-12(15d gap)Verified
- bd_ec306f1e59a5016eMaine State AGfiled 2021-11-12(15d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/cb057e90-fe54-43ce-9cd0-cb744b8b391a.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 28, 2021
- Raw hash
- dc4e0f3251a79241b2d524950694a0a08edae6096b9519a20af0ae7f4cdf23cf
Reporting entity
- Name
- Strategic Benefits Advisors, Inc.norm: strategic benefits advisors
Victim entity
- Name
- Strategic Benefits Advisors, Inc.norm: strategic benefits advisors
Incident
- Discovered
- Oct 11, 2021
- Materiality determined
- —
- Notification sent
- Oct 19, 2021
- Affected individuals
- 36,047
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 17 days(17 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 17d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 11, 2021→ Filed with AG: Oct 28, 202117d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.