HackingProfessional ServicesProfessional ServicesData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)HighContained

Siegel Group

bd_00241e6764a13365 · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 2, 2025

Filed

Apr 1, 2025

To disclose

8 weeks

Affected · nationwide

3,5751 in this filing

Linked

8 filings

Confidence

65%

Full breach record for Siegel Group →

The Siegel Group, Inc. reported an external system breach (hacking) occurring between Jan 28 and Feb 2, 2025, discovered on Feb 2, 2025. 3,575 individuals affected, including 1 Maine resident. Data exposed: SSN, DOB, passport, state ID, alien registration, direct deposit, signature, medical info. Notification sent Mar 31, 2025. Experian credit monitoring offered.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Feb 2, 2025 → Filed with AG Apr 1, 202558d ⏱ ME AG >30d8 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 5 days

discovery → filing · 8 weeks / 58 days

Jan 28, 2025

Begins

Feb 2, 2025

Discovered

Apr 1, 2025

Filed

vs. sector median

9 wks faster

This filing is one of 8 about the same incident.View merged incident

A leak claim by interlock about this victim predates this filing by 38 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Siteinterlockbd_a25dc26b9d0093dc2025-02-25 · +34dVerified
Leak Siteinterlockbd_1aea4a737e42a0802025-02-21 · +38dVerified by operator

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_83d152bdb1071ffc2025-04-01Verified by operator
Vermont State AGbd_35e7cd347a0e7f642025-03-31 · +1dVerified
Indiana State AGbd_5fe70eb9e4daeb982025-03-31 · +1dVerified
Pressinterlockbd_a95f99b7669165742025-02-02 · +58dCandidate

Show 1 more filing ↓up to 387d gap

Maryland State AGbd_3b8c1babd819ef372026-04-23 · +387dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Siegel Group
norm: siegel group
Domain: siegelcompanies.com
Industry: Professional Servicesllm

Discovered: Feb 2, 2025
Breach occurred: Jan 28, 2025 – Feb 2, 2025
Undetected for: 5 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 31, 2025
Affected individuals: 3,575state + nationwide
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1119 Automated CollectionT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Providing written notice of this incident to relevant state regulators, as necessaryProviding written notice to the three major credit reporting agencies, Equifax, Experian, and TransUnion
Initial access: exploit_public_facing

During the incident: Initiated an investigation into the matter with assistance from industry-leading cybersecurity specialists
Secured our network
Notified federal law enforcement regarding the event
Provided access to credit monitoring services for twelve (12) months, through Experian, to individuals whose personal information was potentially affected by this incident, at no cost to these individuals
Providing written notice of this incident to relevant state regulators, as necessary, and to the three major credit reporting agencies, Equifax, Experian, and TransUnion
Changes made: Working to implement additional safeguards and training to its employees
Implemented additional security measures related to data privacy and security to protect against similar events moving forward
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(58 days from discovery to filing)
Compliance flags: ME AG >30d · 58dLeak >30d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Feb 2, 2025
→ Filed with AG: Apr 1, 2025
58d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Feb 2, 2025 → Filed with AG: Apr 1, 2025	58d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

PressFeb 2 · first

Vermont State AG+57d

Indiana State AG+57d

Massachusetts State AG+58d

Maine State AG+58d · this page

Maryland State AG+445d

Pattern: first filing Feb 2, last Apr 23 (MD) — a 445-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/cd2643d0-7d09-40f6-b733-faca4bfa0bd4.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 1, 2025
Raw hash: 3a68f78575580c4d1550f2d1481593d4f30391b9c40e5522cae084c5b054b0fe

Linked disclosures

Ransomware claims (2)

Regulatory filings (5) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entitySiegel Group

Incidentdiscovered Feb 2, 2025

Stated responseInitiated an investigation into the matter with assistance from industry-leading cybersecurity specialists

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov