HackingProfessional ServicesProfessional ServicesVulnerability ExploitStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIILowResolved
Thompson & Horton LLP
bd_2460f839b22fc504 · schema v1 · pii pii-v1
Full breach record for Thompson & Horton LLP →Thompson & Horton LLP, a Dallas-based law firm, experienced unauthorized access to a server hosted by its managed IT services provider (MSP), All Covered, between April 13 and May 3, 2024. The breach was discovered on May 20, 2025 after a security incident affecting the MSP. A review completed May 20, 2025 identified potentially compromised personal information. Three Maine residents were affected. Notification was issued October 29, 2025. Cyberscout 24-month credit monitoring was offered.
Maine clockDiscovered May 20, 2025 → Filed with AG Oct 30, 2025163d ✗ ME AG >90d23 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_71c2bdcabc3a48a7Texas State AGfiled 2025-10-30Verified
- bd_62dd0345ed0ce465Montana State AGfiled 2025-10-29(1d gap)Candidate
- bd_68dca34fb6031c4dNew Hampshire State AGfiled 2025-10-29(1d gap)Verified
- bd_b344e037d355f1a0Indiana State AGfiled 2025-10-29(1d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 1d gap
- bd_ca2da2865ef941c2Vermont State AGfiled 2025-10-29(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/81a6de91-4348-4f75-9d65-f5ec8f67939c.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 30, 2025
- Raw hash
- add5b3753109bee6f3ce8dd32e53b1de8a327a09a8fd67780b0e6a182bd10545
Reporting entity
- Name
- Thompson & Horton LLPnorm: thompson horton
- Industry
- Legal Services
Victim entity
- Name
- Thompson & Horton LLPnorm: thompson horton
- Industry
- Legal Services
- Industry
- Professional Servicesllm
Incident
- Discovered
- May 20, 2025
- Materiality determined
- —
- Notification sent
- Oct 29, 2025
- Affected individuals
- 3
- Data types
- PII
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1078 Valid AccountsT1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Notified federal law enforcement
- Third party
- via All Covered
- Initial access
- supply_chain
Compliance
- Time to disclose
- 23 weeks(163 days from discovery to filing)
- Compliance flags
- ME AG >90d · 163dME resident >60d · 162d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 20, 2025→ Filed with AG: Oct 30, 2025163d 90 days ME AG >90d Maine Discovered: May 20, 2025→ Notified: Oct 29, 2025162d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.