HackingProfessional ServicesProfessional ServicesData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumResolved
Drost Kivlahan McMahon & O'Connor LLC
bd_06cf8f5a53ec4a46 · schema v1 · pii pii-v1
Full breach record for Drost Kivlahan McMahon & O'Connor LLC →Law firm Drost Kivlahan McMahon & O'Connor LLC (DKMO) experienced an external network breach between December 30, 2023 and January 22, 2024 by an unauthorized actor who accessed and acquired files. The breach was discovered on July 30, 2024 after a comprehensive review of impacted files. Two Maine residents were affected; compromised data included names and Social Security numbers. Notifications were sent August 29, 2024. Experian IdentityWorks (12 months) was offered to affected individuals.
Leak gap clock✗ Leak >180d4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
A leak claim by bianlian about this victim predates this filing by 201 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_ad42d877b2791bebLeak Sitebianlianfiled 2024-02-09(201d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c160d237-eb72-4b5e-80cf-8755eedc6f42.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 29, 2024
- Raw hash
- 5218583b206ce2e0a52e67dedc4f93ea99e5b10e0a614c9266b60c3c0049000d
Reporting entity
- Name
- Drost Kivlahan McMahon & O'Connor LLCnorm: drost kivlahan mcmahon o connor
- Domain
- dkmolaw.com
- Industry
- Legal Services
Victim entity
- Name
- Drost Kivlahan McMahon & O'Connor LLCnorm: drost kivlahan mcmahon o connor
- Domain
- dkmolaw.com
- Industry
- Legal Services
- Industry
- Professional Servicesllm
Incident
- Discovered
- Jul 30, 2024
- Materiality determined
- —
- Notification sent
- Aug 29, 2024
- Affected individuals
- 2
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Maine Attorney GeneralNotified federal law enforcementNotified state regulators as necessary
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- Leak >180dME AG ≤30d · 30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 30, 2024→ Filed with AG: Aug 29, 202430d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.