DisclosureLens
HackingHacking OtherCustomer Data InvolvedIdentity (basic)Government IDHigh

Burr & Forman LLP

bd_0d5c7d285321c138 · schema v1 · pii pii-v1

Severity

High

Discovered

Oct 23, 2023

Filed

Jan 10, 2024

To disclose

11 weeks

Affected · nationwide

19,8932 in this filing

Linked

6 filings

Confidence

50%
Full breach record for Burr & Forman LLP →2 incidents on file

Burr & Forman LLP, a law firm, reported a data breach to the Maine Attorney General, stating that an external system breach (hacking) occurred and was discovered on October 23, 2023. The breach affected 2 Maine residents and compromised their names and Social Security numbers. The company began notifying affected individuals on January 9, 2024, and offered identity theft protection services.

Maine clockDiscovered Oct 23, 2023 → Filed with AG Jan 10, 202479d ⏱ ME AG >30d11 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 11 weeks / 79 days

Oct 23, 2023

Begins

Oct 23, 2023

Discovered

Jan 10, 2024

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filing ↓up to 9d gap

Filing propagation · 6 filings · 6 states

View merged incident ↗
Illinois State AGJan 1 · first
Indiana State AG+8d
HHS OCR+8d
Vermont State AG+9d
Montana State AG+9d
Maine State AG+9d · this page

Pattern: first filing Jan 1 (IL), last Jan 10 (ME) — a 9-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.