HackingProfessional ServicesProfessional ServicesCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIPHIIDENTITY_GOVERNMENTMediumContained
Tuggle Duggins
bd_1808f062afe41f74 · schema v1 · pii pii-v1
Full breach record for Tuggle Duggins →Tuggle Duggins P.A. (Greensboro, NC law firm) suffered an external network breach on Oct 1, 2024, in which files were copied from their systems. Discovered Sept 2025. Eight Maine residents affected. Data compromised: names, health information, and Social Security numbers. Firm secured network, enhanced cybersecurity measures, and offered 12-month Experian IdentityWorks services.
Maine clockDiscovered Sep 18, 2025 → Filed with AG Feb 6, 2026141d ✗ ME AG >90d20 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
A leak claim by black_basta about this victim predates this filing by 494 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_04867b4476fadb63Leak Siteblack_bastafiled 2024-10-01(493d gap)Verified
- bd_1039378c59186ab9Leak Siteblack_bastafiled 2024-09-30(494d gap)Verified
Regulatory filings (2) · sorted by filing gap
- bd_084c4a4f09bc5477New Hampshire State AGfiled 2026-02-06Verified
- bd_d6419cff8c261687Vermont State AGfiled 2026-02-06Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0bc65e65-1c76-40b2-a692-b13bcc459a47.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 6, 2026
- Raw hash
- 7472d068b380c97ef66a0bbacc9d0c57966d625d017d37963357abb2f6b8d4f9
Reporting entity
- Name
- Tuggle Dugginsnorm: tuggle duggins
- Domain
- tuggleduggins.com
- Industry
- Legal Services
Victim entity
- Name
- Tuggle Dugginsnorm: tuggle duggins
- Domain
- tuggleduggins.com
- Industry
- Legal Services
- Industry
- Professional Servicesllm
Incident
- Discovered
- Sep 18, 2025
- Materiality determined
- —
- Notification sent
- Feb 6, 2026
- Affected individuals
- 8
- Data types
- PIIPHIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 ChannelT1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 20 weeks(141 days from discovery to filing)
- Compliance flags
- ME AG >90d · 141dLeak >180dME resident >60d · 141d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 18, 2025→ Filed with AG: Feb 6, 2026141d 90 days ME AG >90d Maine Discovered: Sep 18, 2025→ Notified: Feb 6, 2026141d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.