MisuseKnowledge AbuseCustomer Data InvolvedPIILowResolved
TKH Group
bd_fbe015afff29d7b6 · schema v1 · pii pii-v1
Full breach record for TKH Group →TKH Group, PC, a financial services company, reported a data breach affecting 2 Maine residents. The breach, discovered on September 21, 2025, was described as an internal system breach. The company began notifying affected individuals on January 15, 2026, and is offering 12 months of identity theft protection services through Epiq-Privacy Solutions.
Maine clockDiscovered Sep 21, 2025 → Filed with AG Jan 15, 2026116d ✗ ME AG >90d17 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_4a5c35a791666f7cIndiana State AGfiled 2026-01-15Candidate
- bd_88b1ef0238001f25Indiana State AGfiled 2026-01-15Candidate
- bd_90a7be27efc13043Vermont State AGfiled 2026-01-15Verified
- bd_f93f58455746d3c3New Hampshire State AGfiled 2026-01-15Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b479e150-7963-4860-b885-fc576b3d3d58.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 15, 2026
- Raw hash
- 2e7e40e84fe0c5ae687d5630c6f2d01d52df511411788db8c8250360152caa02
Reporting entity
- Name
- TKH Groupnorm: tkh group
Victim entity
- Name
- TKH Groupnorm: tkh group
Incident
- Discovered
- Sep 21, 2025
- Materiality determined
- —
- Notification sent
- Jan 15, 2026
- Affected individuals
- 2
- Data types
- PII
- Attack vector
- Insider
Compliance
- Time to disclose
- 17 weeks(116 days from discovery to filing)
- Compliance flags
- ME AG >90d · 116dME resident >60d · 116d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 21, 2025→ Filed with AG: Jan 15, 2026116d 90 days ME AG >90d Maine Discovered: Sep 21, 2025→ Notified: Jan 15, 2026116d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.