HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedDelayed DiscoveryIdentity (basic)MinorHighContained

Daniels Law Group LLC

bd_063312025bf467d8 · schema v1 · pii pii-v1

Severity

High

Discovered

Jul 9, 2025

Filed

Aug 12, 2025

To disclose

5 weeks

Affected · nationwide

5,1991 in this filing

Linked

7 filings

Confidence

65%

Full breach record for Daniels Law Group LLC →

Daniels Law Group, LLC reported an external system breach (hacking) occurring between June 26 and July 1, 2025. The firm discovered the incident on July 9, 2025. Approximately 5,199 individuals were affected, including 1 Maine resident. The breach involved unauthorized access to file servers containing personal data of clients and their minor children. The firm engaged counsel, reported to law enforcement, hired forensic consultants, and offered 12-24 months of credit monitoring and cyber monitoring services through Cyberscout.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jul 9, 2025 → Filed with AG Aug 12, 202534d ⏱ ME AG >30d5 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 13 days

discovery → filing · 5 weeks / 34 days

Jun 26, 2025

Begins

Jul 9, 2025

Discovered

Aug 12, 2025

Filed

vs. sector median

14 wks faster

This filing is one of 7 about the same incident.View merged incident

A leak claim by qilin about this victim predates this filing by 34 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Siteqilinbd_8c44d65e9958589d2025-07-21 · +22dVerified by operator
Leak Siteqilinbd_f0477ba0758f0f542025-07-09 · +34dVerified by operator

Regulatory filings (4) · sorted by filing gap

New Hampshire State AGQilinbd_1136f26dc1e539702025-08-12Verified
Montana State AGbd_92df95f1e22817f22025-08-12Verified by operator
Massachusetts State AGbd_df5cd915b80d4a232025-08-12Verified by operator
Indiana State AGbd_aaa66ad3354ad5732025-08-11 · +1dVerified by operator

Name: Foundry
norm: foundry
Domain: foundry.com

Name: Daniels Law Group LLC
norm: daniels law
Domain: danielslawgroupllc.com
Industry: Professional Servicesllm

Discovered: Jul 9, 2025
Breach occurred: Jun 26, 2025 – Jul 1, 2025
Undetected for: 13 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 12, 2025
Affected individuals: 5,199state + nationwide
Data types: Identity (basic)Minor
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Reported the incident to law enforcement
Initial access: exploit_public_facing

During the incident: Eliminated unauthorized access and restored security to our system
Engaged counsel
Reported the incident to law enforcement
Hired third-party forensics consultants to investigate and resolve this incident
Changes made: Implementing additional security measures to help prevent a similar incident from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(34 days from discovery to filing)
Compliance flags: ME AG >30d · 34dLeak >30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jul 9, 2025
→ Filed with AG: Aug 12, 2025
34d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jul 9, 2025 → Filed with AG: Aug 12, 2025	34d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGAug 11 · first

New Hampshire State AG+1d

Montana State AG+1d

Massachusetts State AG+1d

Maine State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/9087bea4-54f6-4881-af88-cd9bccffe964.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 12, 2025
Raw hash: 954caa96948507fe75bc682b871d2b94829f355841064613897b79e20e4d4e79

Linked disclosures

Ransomware claims (2)

Regulatory filings (4) · sorted by filing gap

Reporting entityFoundry

Victim entityDaniels Law Group LLC

Incidentdiscovered Jul 9, 2025

Stated responseEliminated unauthorized access and restored security to our system

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov