HackingStolen CredentialsCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Salzmann Hughes, P.C.
bd_1ac96fa0f822c075 · schema v1 · pii pii-v1
Full breach record for Salzmann Hughes, P.C. →Salzmann Hughes, P.C. notified the Maryland Attorney General of a security breach affecting 7 Maryland residents. Between September 25 and October 1, 2024, an unknown party accessed an employee email account without authorization, obtaining names and Social Security numbers. The firm terminated access, engaged cybersecurity specialists, and provided 12 months of complimentary credit monitoring to affected individuals.
Maryland clock✗ MD AG >90d22 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed7 affectedView incident
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376509.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 5, 2025
- Raw hash
- 9c3e15fde3a19f7cc00ed5ad09a8a84d06b36ba1bcda3834d4586de515a93ec1
Reporting entity
- Name
- Salzmann Hughes, P.C.norm: salzmann hughes
Victim entity
- Name
- Salzmann Hughes, P.C.norm: salzmann hughes
Incident
- Discovered
- Oct 1, 2024
- Materiality determined
- —
- Notification sent
- Mar 5, 2025
- Affected individuals
- 7
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1114 Email CollectionT1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 22 weeks(155 days from discovery to filing)
- Compliance flags
- MD AG >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.