HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedDelayed DiscoveryMediumResolved
Johnson, Webbert, & Beard LLP
bd_253f67234c3f93e5 · schema v1 · pii pii-v1
Full breach record for Johnson, Webbert, & Beard LLP →Johnson, Webbert & Beard LLP, a law firm in Topsham, ME, reported an external system breach (hacking) that occurred on September 15, 2025 and was discovered on April 7, 2026. A total of 1,418 individuals were affected, including 1,013 Maine residents. Written notifications were sent on May 7, 2026. Identity theft protection (12 months, IDX) was offered to affected individuals. A prior breach notification was filed in January 2026.
Maine clockDiscovered Apr 7, 2026 → Filed with AG May 7, 202630d ✓ ME AG ≤30d4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_0eb000d78e850cf0Indiana State AGfiled 2026-05-07Verified
- bd_3aae894bc66bf6b9Vermont State AGfiled 2026-05-07Verified
- bd_a00e22fe66f17b55New Hampshire State AGfiled 2026-05-11(4d gap)Verified
- bd_34e045524244cf24Massachusetts State AGfiled 2026-05-01(6d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/9557088b-9982-485e-972e-8f4e8381edf6.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 7, 2026
- Raw hash
- 7d8dd6526c86895e38e5e62a9510324c1c853495ee407d89b0762d05d240d6a6
Reporting entity
- Name
- Johnson, Webbert, & Beard LLPnorm: johnson webbert beard
- Industry
- Legal Services
Victim entity
- Name
- Johnson, Webbert, & Beard LLPnorm: johnson webbert beard
- Industry
- Legal Services
- Industry
- Professional Servicesllm
Incident
- Discovered
- Apr 7, 2026
- Materiality determined
- —
- Notification sent
- May 7, 2026
- Affected individuals
- 1,013
- Data types
- —
- Attack vector
- Unauthorized Access
- Threat actor
- External
- Regulator citations
- Notified Maine Attorney GeneralConsumer reporting agencies notified (Maine residents exceed 1,000)
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 7, 2026→ Filed with AG: May 7, 202630d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.