HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Magers & Quinn
bd_3332ad2387d5e734 · schema v1 · pii pii-v1
Full breach record for Magers & Quinn →Magers & Quinn, a law firm based in Minneapolis, MN, reported an external system breach (hacking) occurring on July 8, 2021, discovered on September 15, 2021. The incident compromised names and financial account/credit card numbers (with security codes/PINs). A total of 3,885 individuals were affected, including 6 Maine residents. The firm notified affected individuals in writing on October 13, 2021, and provided 12 months of credit monitoring through Kroll.
Maine clockDiscovered Sep 15, 2021 → Filed with AG Oct 13, 202128d ✓ ME AG ≤30d28 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_50b5364ffbb24992Maine State AGfiled 2021-10-13Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/4bd6d4c7-caea-4e56-9813-32301a69976b.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 13, 2021
- Raw hash
- 84ec5da3110b8613991a32da0be9fc37068b5160110ec16a1fb8fc698580452d
Reporting entity
- Name
- Magers & Quinnnorm: magers quinn
Victim entity
- Name
- Magers & Quinnnorm: magers quinn
Incident
- Discovered
- Sep 15, 2021
- Materiality determined
- —
- Notification sent
- Oct 13, 2021
- Affected individuals
- 3,885
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 28d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 15, 2021→ Filed with AG: Oct 13, 202128d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.