Regulatory disclosure filed with the Maine Attorney General describing a third-party identity verification system breach.