HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Financial accountFinancial credentialsMedium

Marans Newman Tsolis & Nazinitsky LLC

bd_29b68aa201aa0b93 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 5, 2022

Filed

May 12, 2022

To disclose

5 weeks

Affected · nationwide

6,3032 in this filing

Linked

5 filings

Confidence

63%

Full breach record for Marans Newman Tsolis & Nazinitsky LLC →

Marans Newman Tsolis & Nazinitsky LLC, a law firm, reported a data breach affecting 6,303 individuals. The incident, an external system breach (hacking), occurred on September 14, 2021, and was discovered on April 5, 2022. Compromised information included names combined with financial account or credit/debit card numbers along with their access codes. The firm began notifying affected individuals on May 12, 2022, offering 12 months of identity theft protection services through IDX.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d5 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 203 days

discovery → filing · 5 weeks / 37 days

Sep 14, 2021

Begins

Apr 5, 2022

Discovered

May 12, 2022

Filed

vs. sector median

13 wks faster

This filing is one of 5 about the same incident.View merged incident

A leak claim by conti about this victim predates this filing by 232 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecontibd_f6e7008bc65cb71d2021-09-22 · +232dVerified by operator

Regulatory filings (3) · sorted by filing gap

New Hampshire State AGbd_027649c6c75e1bc82022-05-12Verified by operator
Indiana State AGbd_e8d29031cea102382022-05-12Verified by operator
Massachusetts State AGbd_ec433dc0ab71e92a2022-05-12Verified by operator

Name: Marans Newman Tsolis & Nazinitsky LLC
norm: marans newman tsolis nazinitsky

Name: Marans Newman Tsolis & Nazinitsky LLC
norm: marans newman tsolis nazinitsky
Industry: Professional Servicesllm

Discovered: Apr 5, 2022
Breach occurred: Sep 14, 2021
Undetected for: 203 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 12, 2022
Affected individuals: 6,303state + nationwide
Data types: Identity (basic)Financial accountFinancial credentials
Data elements: Financial account number
Attack vector: Unauthorized Access
Threat actor: External

During the incident: Offered 12 months of credit and CyberScan monitoring via IDX
Provided a $1,000,000 insurance reimbursement policy
Provided fully managed identity theft recovery services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(37 days from discovery to filing)
Compliance flags: Leak >180dME AG >30d · 37d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Apr 5, 2022
→ Filed with AG: May 12, 2022
37d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Apr 5, 2022 → Filed with AG: May 12, 2022	37d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

New Hampshire State AGMay 12 · first

Indiana State AGMay 12 · first

Massachusetts State AGMay 12 · first

Maine State AGMay 12 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d4cfc4f7-8d60-41b6-986f-6a1b34099fd4.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 12, 2022
Raw hash: f3636df31116dc613374ba32e8e512750ca73b836664e6f49d0ae71581dab913

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityMarans Newman Tsolis & Nazinitsky LLC

Victim entityMarans Newman Tsolis & Nazinitsky LLC

Incidentdiscovered Apr 5, 2022

Stated responseOffered 12 months of credit and CyberScan monitoring via IDX

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov