HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICCriticalContained
Heidell, Pittoni, Murphy & Bach, LLP
bd_0bff320226bb9e18 · schema v1 · pii pii-v1
Full breach record for Heidell, Pittoni, Murphy & Bach, LLP →Heidell, Pittoni, Murphy & Bach, LLP reported an external system breach (hacking) occurring on November 22, 2021, discovered on April 22, 2022. The incident compromised names and Social Security Numbers of 114,979 individuals, including 9 Maine residents. The firm notified affected individuals in writing on May 16, 2022, and provided 12 months of credit monitoring and identity theft protection services.
Maine clockDiscovered Apr 22, 2022 → Filed with AG May 17, 202225d ✓ ME AG ≤30d25 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_1cde1c4bbce1c1c9Montana State AGfiled 2022-05-16(1d gap)Candidate
- bd_c8b05473b8254b04New Hampshire State AGfiled 2022-05-16(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/087317c1-d3c3-4463-86b2-78386509359c.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 17, 2022
- Raw hash
- 6bf2d4393b9b833a554b9c26ded0a9cfdefe53c53df0cf2c46e0877804999112
Reporting entity
- Name
- Heidell, Pittoni, Murphy & Bach, LLPnorm: heidell pittoni murphy bach
Victim entity
- Name
- Heidell, Pittoni, Murphy & Bach, LLPnorm: heidell pittoni murphy bach
Incident
- Discovered
- Apr 22, 2022
- Materiality determined
- —
- Notification sent
- May 16, 2022
- Affected individuals
- 114,979
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 25 days(25 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 25d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 22, 2022→ Filed with AG: May 17, 202225d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.