HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumResolved
Cutcliffe Archetto & Santilli
bd_24115aa69154ca11 · schema v1 · pii pii-v1
Full breach record for Cutcliffe Archetto & Santilli →Cutcliffe Archetto & Santilli, a Rhode Island law firm, experienced a cybersecurity incident on or around May 22, 2025, discovered on September 11, 2025. An external actor gained unauthorized access to the firm's systems. Potentially exposed data includes name, address, date of birth, and Social Security Number. 749 total individuals affected; 4 Maine residents. Affected individuals were notified by written letter on October 15, 2025, with 12-month credit monitoring offered via Cyberscout.
Maine clockDiscovered Sep 11, 2025 → Filed with AG Oct 15, 202534d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
A leak claim by akira about this victim predates this filing by 121 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_79b175df44f5d9c1Leak Siteakirafiled 2025-06-25(111d gap)Verified by operator
- bd_b6119bec1e5dcd5fLeak Siteakirafiled 2025-06-16(121d gap)Verified
Regulatory filings (2) · sorted by filing gap
- bd_d1134e6e232556abVermont State AGfiled 2025-10-15Verified by operator
- bd_b853d9342a141343New Hampshire State AGfiled 2025-10-16(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/9c17b9f1-2303-47fe-baae-7101706d4061.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 15, 2025
- Raw hash
- 0800c97e338376b6254f5356f9d9d0a1c8284b337c127d67b89ff01a1f1aeb79
Reporting entity
- Name
- Cutcliffe Archetto & Santillinorm: cutcliffe archetto santilli
- Domain
- cutcliffearchetto.com
- Industry
- Legal Services
Victim entity
- Name
- Cutcliffe Archetto & Santillinorm: cutcliffe archetto santilli
- Domain
- cutcliffearchetto.com
- Industry
- Legal Services
- Industry
- Professional Servicesllm
Incident
- Discovered
- Sep 11, 2025
- Materiality determined
- —
- Notification sent
- Oct 15, 2025
- Affected individuals
- 4
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
- Regulator citations
- Law enforcement notified
Compliance
- Time to disclose
- 5 weeks(34 days from discovery to filing)
- Compliance flags
- ME AG >30d · 34dLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 11, 2025→ Filed with AG: Oct 15, 202534d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.