HackingProfessional ServicesProfessional ServicesCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumContained
Shutts
bd_186ee5c93a4eb414 · schema v1 · pii pii-v1
Full breach record for Shutts →Shutts & Bowen LLP, a Miami-based business law firm, experienced an unauthorized network intrusion between February 19–20, 2025. An unauthorized actor gained access to a single system and exfiltrated a limited amount of data including names and Social Security numbers. The incident was discovered on April 14, 2025 following a report received March 4, 2025. Two Maine residents were affected. Affected individuals were offered 24-month Experian identity monitoring at no cost.
Maine clockDiscovered Apr 14, 2025 → Filed with AG May 9, 202525d ✓ ME AG ≤30d25 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_50bddd5e6e6f13abLeak Sitesilentransomgroupfiled 2025-04-10(28d gap)Verified
Regulatory filings (2) · sorted by filing gap
- bd_126d7821e8bf678dNew Hampshire State AGfiled 2025-05-09Verified
- bd_86977fde13492ebcIndiana State AGfiled 2025-05-09Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/907da400-2067-4ebf-9f03-b6750775fe78.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 9, 2025
- Raw hash
- 33c4a069e1a13289bcc935af7c9097299cc5115093fb86c14ac1060e3e9923be
Reporting entity
- Name
- Shuttsnorm: shutts
- Domain
- shutts.com
- Industry
- Legal Services
Victim entity
- Name
- Shuttsnorm: shutts
- Domain
- shutts.com
- Industry
- Legal Services
- Industry
- Professional Servicesllm
Incident
- Discovered
- Apr 14, 2025
- Materiality determined
- —
- Notification sent
- May 9, 2025
- Affected individuals
- 2
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 ChannelT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Maine Attorney GeneralNotified federal law enforcement
Compliance
- Time to disclose
- 25 days(25 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 25d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 14, 2025→ Filed with AG: May 9, 202525d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.