HackingHacking OtherCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMedium
Burr & Forman LLP
bd_0d5c7d285321c138 · schema v1 · pii pii-v1
Full breach record for Burr & Forman LLP →Burr & Forman LLP, a law firm, reported a data breach to the Maine Attorney General, stating that an external system breach (hacking) occurred and was discovered on October 23, 2023. The breach affected 2 Maine residents and compromised their names and Social Security numbers. The company began notifying affected individuals on January 9, 2024, and offered identity theft protection services.
Maine clockDiscovered Oct 23, 2023 → Filed with AG Jan 10, 202479d ⏱ ME AG >30d11 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_2a488a25ec65f451Vermont State AGfiled 2024-01-10Verified
- bd_9c70d44242deebc5Montana State AGfiled 2024-01-10Verified
- bd_936f18390c8af16dIndiana State AGfiled 2024-01-09(1d gap)Verified
- bd_b7faab01c06cf85bHHS OCRfiled 2024-01-09(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/618eb793-d1ef-475a-91db-020d11bca262.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 10, 2024
- Raw hash
- effc0ee1db1a495c1679bd06578631d1bc5d2c6cfc6cc4c1480873e1614c4b9a
Reporting entity
- Name
- Burr & Forman LLPnorm: burr forman
Victim entity
- Name
- Burr & Forman LLPnorm: burr forman
Incident
- Discovered
- Oct 23, 2023
- Materiality determined
- —
- Notification sent
- Jan 9, 2024
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 11 weeks(79 days from discovery to filing)
- Compliance flags
- ME AG >30d · 79dME resident >60d · 78d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 23, 2023→ Filed with AG: Jan 10, 202479d 30 days (soft) ME AG >30d Maine Discovered: Oct 23, 2023→ Notified: Jan 9, 202478d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.