HackingFinancial ServicesFinanceCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumResolved
Mark Leyden & Associates, LLC
bd_f82fa2a5c8b2bf09 · schema v1 · pii pii-v1
Full breach record for Mark Leyden & Associates, LLC →Mark Leyden & Associates, LLC (financial services, Indianapolis IN) reported unauthorized access to an email account occurring between May and October 2025. The breach was discovered/determined on February 18, 2026. One Maine resident's name and Social Security number were exposed. Notification was sent via first-class mail on March 24, 2026. The company offered one year of IDX credit monitoring and identity theft protection and enhanced security measures.
Maine clockDiscovered Feb 18, 2026 → Filed with AG Mar 24, 202634d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_0014e06b1dea16f8Indiana State AGfiled 2026-03-24Candidate
- bd_9e8ceb361a3a9e89New Hampshire State AGfiled 2026-03-24Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/5436c107-c21b-41bc-b5f6-4d7f286f1886.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 24, 2026
- Raw hash
- 0cbac6464858398427001b89cc59ab643cbfd87bb5b18f00a6697d9fa65eb408
Reporting entity
- Name
- Mark Leyden & Associates, LLCnorm: mark leyden associates
- Industry
- Financial Services
Victim entity
- Name
- Mark Leyden & Associates, LLCnorm: mark leyden associates
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Feb 18, 2026
- Materiality determined
- Feb 18, 2026
- Notification sent
- Mar 24, 2026
- Affected individuals
- 1
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1114 Email Collection
- Threat actor
- External
Compliance
- Time to disclose
- 5 weeks(34 days from discovery to filing)
- Compliance flags
- ME AG >30d · 34d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 18, 2026→ Filed with AG: Mar 24, 202634d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.