Confirmed breach. Intrusion Mar 13, 2021, discovered Mar 13, 2021 — the first regulatory filing landed 130 days later (flagged late). 1,502 individuals reported across the linked filings.
incident inc_9ebf8f45954b4a98 · merge_method human · confidence 100%
Litigation Timing
Notification delay
130days
Discovered → first regulatory filing
Discovery variance
95days
Range of discovered_at dates across filings
Filing span
Regulatory clocksWashington✗ WA AG >90dOregon✗ OR AG >45dMaine⏱ ME AG >30d · 35dFull clock table in Litigation Timeline
State AGConfirmedLifecycle stage 2 of 3: ConfirmedUnverified claimConfirmedEnforcedhigh sensitivity
Hyphen, LLC experienced unauthorized access to its network on or about March 13, 2021. The investigation, concluded June 16, 2021, confirmed that full names, Social Security numbers, and bank account information were exfiltrated. Affected individuals were offered 12 months of complimentary identity theft protection through IDX.
Hyphen, LLC reported a data breach affecting 171 Maine residents. The breach, which was discovered on June 16, 2021, and occurred on March 13, 2021, involved an external system breach (hacking). The compromised information includes names in combination with financial account numbers or credit/debit card numbers and their security codes. The company offered 12 months of credit monitoring services through IDX to the affected individuals.
Affected (this filing): 171
ME AG >30d · 35d
40 days
🌲Washington State AGlinked via operator-confirmed · 100%
Hyphen, LLC, a finance sector entity reported a unauthorized access incident to the Washington Attorney General. The organization became aware of the incident on 2021-03-15 and filed notice on 2021-08-30. 1,331 Washington residents were affected. 168 days elapsed between awareness and notification. 2 days to identify the breach.
Affected (this filing): 1,331
🦫Oregon State AGMost recentlinked via operator-confirmed · 100%
Hyphen LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2021-09-01. The breach occurred during 3/13/2021. The breach was discovered on 3/13/2021. Notice was sent on 7/16/2021.
OR AG >45d
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.