HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Hahn Loeser & Parks, LLP

bd_09eee432ad517d5e · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jul 11, 2023

To disclose

—

Affected

4state residents only

Linked

6 filings

Confidence

67%

Full breach record for Hahn Loeser & Parks, LLP →2 incidents on file

Hahn Loeser & Parks LLP notified individuals of a network security incident where an unauthorized third party accessed their network. Exposed data included names, driver's license numbers, and Social Security numbers. The firm secured its network, engaged forensic specialists, reported to law enforcement, and offered 12-24 months of identity theft protection services through IDX.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Jul 11, 2023

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Maine State AGbd_7db0a24434fef1752023-07-12 · +1dVerified
California State AGbd_98f0ed9bf5bc347f2023-07-12 · +1dVerified
Massachusetts State AGbd_7dd1031b9810b5012023-07-18 · +7dVerified
Indiana State AGbd_86b1d9167d44b9462023-06-23 · +18dVerified

Show 1 more filing ↓up to 18d gap

Vermont State AGbd_8f0c6f43bd2831f72023-06-23 · +18dCandidate

Name: Hahn Loeser & Parks, LLP
norm: hahn loeser parks

Name: Hahn Loeser & Parks, LLP
norm: hahn loeser parks
Industry: Professional Servicesllm

Discovered: —
Materiality determined: —
Notification sent: Jun 23, 2023
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Reported this matter to law enforcement
Initial access: valid_credentials

During the incident: Shut off access to the impacted systems
Engaged specialized third-party forensic and technical resources to respond to the incident
Secured its network and the data that we maintain
Conducted an investigation with the assistance of third-party forensic specialists
Reported this matter to law enforcement
Offering identity theft protection services through IDX, A ZeroFox Company
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Indiana State AGJun 23 · first

Vermont State AGJun 23 · first

Montana State AG+18d · this page

Maine State AG+19d

California State AG+19d

Massachusetts State AG+25d

Pattern: first filing Jun 23 (IN), last Jul 18 (MA) — a 25-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-748.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 11, 2023
Raw hash: 9dc54b6679c2868c0daf6426ced4ab75a7afd7ca9766e525834564f4c05c7aad

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityHahn Loeser & Parks, LLP

Victim entityHahn Loeser & Parks, LLP

IncidentUnauthorized Access

Stated responseShut off access to the impacted systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov