Southwest Stage Funding, LLC

The Maine Office of the Attorney General disclosed a data breach affecting Southwest Stage Funding, LLC (d/b/a Cascade Financial Services) in January 2025. The incident occurred between July 8–9, 2024, when unauthorized actors gained access to employee email accounts, compromising sensitive information. A total of 5,564 individuals were impacted, with three Maine residents formally notified. While the exact nature of the exposed data was not detailed, the breach involved internal communications, potentially exposing employee or customer-related information tied to financial services. The unauthorized access suggests a phishing or credential-compromise attack, leading to a leak of internal data. No ransomware was reported, but the exposure of email accounts raises concerns over fraud, identity theft, or further exploitation of compromised details. The breach underscores vulnerabilities in email security protocols and the risks of third-party access to sensitive corporate systems.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/3835d848-28ef-46f6-9e99-6a5f110cfb18.html

TPRM report: https://www.rankiteo.com/company/southwest-funding

"id": "sou033091825",
"linkid": "southwest-funding",
"type": "Breach",
"date": "7/2024",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 5564,
                        'industry': 'Financial Services',
                        'name': 'Southwest Stage Funding, LLC d/b/a Cascade '
                                'Financial Services',
                        'type': 'Private Company'}],
 'attack_vector': 'Unauthorized Access (Email Account Compromise)',
 'customer_advisories': ['Written Notifications to 3 Maine Residents'],
 'data_breach': {'number_of_records_exposed': 5564},
 'date_publicly_disclosed': '2025-01-16',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving unauthorized access to employee email '
                'accounts at Southwest Stage Funding, LLC d/b/a Cascade '
                'Financial Services. The breach affected 5,564 individuals, '
                'with 3 Maine residents notified in writing.',
 'impact': {'data_compromised': True,
            'systems_affected': ['Employee Email Accounts']},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'response': {'communication_strategy': ['Written Notifications to Affected '
                                         'Maine Residents']},
 'title': 'Data Breach at Southwest Stage Funding, LLC d/b/a Cascade Financial '
          'Services',
 'type': 'Data Breach'}