HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedData ExfiltratedPIIGovernment IDIdentity (basic)High

Kingsley and Kingsley Lawyers

bd_0748c9684dc09cf3 · schema v1 · pii pii-v1

Severity

High

Discovered

Aug 22, 2021

Filed

Apr 15, 2022

To disclose

34 weeks

Affected · nationwide

29,2049 in this filing

Linked

7 filings

Confidence

65%

Full breach record for Kingsley and Kingsley Lawyers →

Kingsley and Kingsley Lawyers, a law firm, experienced an external system breach on August 21, 2021, discovered the following day. The incident affected 29,204 individuals, compromising their names and Social Security numbers. The firm notified affected individuals on April 1, 2022, and offered one year of credit monitoring and identity theft restoration services through Kroll.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Aug 22, 2021 → Filed with AG Apr 15, 2022236d ✗ ME AG >90d34 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 1 days

discovery → filing · 34 weeks / 236 days

Aug 21, 2021

Begins

Aug 22, 2021

Discovered

Apr 15, 2022

Filed

vs. sector median

+15 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Massachusetts State AGbd_25d81f706178edbd2022-04-15Verified
California State AGbd_f0918a57511e72802022-04-15Verified
New Hampshire State AGbd_73097b477c5e10af2022-04-18 · +3dVerified
Oregon State AGbd_57ab81d7d9549f3a2022-04-07 · +8dVerified

Show 2 more filings ↓up to 14d gap

Indiana State AGbd_36ea5ef01e481ba62022-04-01 · +14dVerified
Montana State AGbd_660598c74cbcbc122022-04-01 · +14dVerified by operator

Name: Kingsley and Kingsley Lawyers
norm: kingsley and kingsley lawyers

Name: Kingsley and Kingsley Lawyers
norm: kingsley and kingsley lawyers
Industry: Professional Servicesllm

Discovered: Aug 22, 2021
Breach occurred: Aug 21, 2021
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Apr 1, 2022
Affected individuals: 29,204state + nationwide
Data types: PIIGovernment IDIdentity (basic)
Data elements: Social Security number
Attack vector: Unauthorized Access
Threat actor: External

During the incident: Offered 1 year of credit monitoring, fraud consultation, and identity theft restoration services through Kroll
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 34 weeks(236 days from discovery to filing)
Compliance flags: ME AG >90d · 236dME resident >180d · 222d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Aug 22, 2021
→ Filed with AG: Apr 15, 2022
236d 90 days ME AG >90d
Maine
Discovered: Aug 22, 2021
→ Notified: Apr 1, 2022
222d 180 days ME resident >180d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Aug 22, 2021 → Filed with AG: Apr 15, 2022	236d	90 days	ME AG >90d
Maine	Discovered: Aug 22, 2021 → Notified: Apr 1, 2022	222d	180 days	ME resident >180d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Indiana State AGApr 1 · first

Montana State AGApr 1 · first

Oregon State AG+6d

Massachusetts State AG+14d

California State AG+14d

Maine State AG+14d · this page

New Hampshire State AG+17d

Pattern: first filing Apr 1 (IN), last Apr 18 (NH) — a 17-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/fe15bd93-e30f-4841-98b1-84c758fdd4af.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 15, 2022
Raw hash: b6c9033eb7d089bc33a82d2b4edbb84bcfddb6318c7345ff8454adceb0e21a79

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityKingsley and Kingsley Lawyers

Victim entityKingsley and Kingsley Lawyers

Incidentdiscovered Aug 22, 2021

Stated responseOffered 1 year of credit monitoring, fraud consultation, and identity theft restoration services through Kroll

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov