HackingEnergy & UtilitiesUtilitiesVulnerability ExploitCapture Stored DataData ExfiltratedTargetedIdentity (basic)Government IDFinancial accountEmploymentHighContained

Anderson Feazel Management

bd_f7793113a52d5868 · schema v1 · pii pii-v1

Severity

High

Discovered

Aug 1, 2024

Filed

Aug 30, 2024

To disclose

29 days

Affected · nationwide

6,5004 in this filing

Linked

6 filings

Confidence

65%

Full breach record for Anderson Feazel Management →

Anderson Feazel Management Inc. reported an external system breach (hacking) occurring on July 31, 2024, discovered on August 1, 2024. The incident affected approximately 6,500 individuals, including 4 Maine residents. Exfiltrated data included names, SSNs, addresses, salary info, W-2s, and tax returns. The company engaged law enforcement and forensic experts, reset credentials, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Aug 1, 2024 → Filed with AG Aug 30, 202429d ✓ ME AG ≤30d29 days discovery → filing

Incident timeline

undetected · 1 days

discovery → filing · 29 days

Jul 31, 2024

Begins

Aug 1, 2024

Discovered

Aug 30, 2024

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_72d8714f9c3893802024-09-13 · +14dVerified
New Hampshire State AGbd_7d7fc4d400cb14082024-09-13 · +14dVerified
Montana State AGbd_b5c581da5333f6432024-09-13 · +14dCandidate
Indiana State AGbd_f30fde151182f3182024-09-13 · +14dVerified

Show 1 more filing ↓up to 19d gap

Maine State AGbd_428c676f0c0133d82024-09-18 · +19dVerified

Name: Kean Miller LLP
norm: kean miller

Name: Anderson Feazel Management
norm: anderson feazel management
Domain: andersonoilandgas.com
Industry: Energy & Utilitiesllm

Discovered: Aug 1, 2024
Breach occurred: Jul 31, 2024
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Aug 30, 2024
Affected individuals: 6,500state + nationwide
Data types: Identity (basic)Government IDFinancial accountEmployment
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 ChannelT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified FBI and state law enforcement
Initial access: exploit_public_facing

During the incident: Contacted federal and local law enforcement
Forced password changes
Augmented security monitoring
Engaged an independent subject matter expert for a full forensic investigation
Changes made: Conducting thorough reviews and strengthening of security systems
Upgraded monitoring and testing
Implementing additional safeguards, policies, and procedures relating to data privacy and security
Providing 12 months of credit monitoring and identity protection services through Equifax
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: ME AG ≤30d · 29d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Aug 1, 2024
→ Filed with AG: Aug 30, 2024
29d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Aug 1, 2024 → Filed with AG: Aug 30, 2024	29d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Maine State AGAug 30 · first · this page

Massachusetts State AG+14d

New Hampshire State AG+14d

Montana State AG+14d

Indiana State AG+14d

Maine State AG+19d

Pattern: first filing Aug 30 (ME), last Sep 18 (ME) — a 19-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f5f1e80f-f50f-489f-aa0c-1cc81a3b280d.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 30, 2024
Raw hash: ed77779af769cfe3753bf39d64410354702014a532bbb2d04a0263fd07c79edd

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityKean Miller LLP

Victim entityAnderson Feazel Management

Incidentdiscovered Aug 1, 2024

Stated responseContacted federal and local law enforcement

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov