HackingProfessional ServicesProfessional ServicesData ExfiltratedTargetedIdentity (basic)LowContained

Wong Fleming

bd_340871bebe4e05c6 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 24, 2025

Filed

Aug 29, 2025

To disclose

5 weeks

Affected

2state residents only

Linked

8 records

Confidence

65%

Full breach record for Wong Fleming →

Wong Fleming, a law firm, reported an external system breach (hacking) occurring between Dec 13-14, 2024. The incident was discovered on July 24, 2025. Unauthorized actors accessed the network and potentially copied files. Two Maine residents were affected, with names and other personal identifiers potentially exposed. The firm took systems offline, notified law enforcement, and offered 12 months of credit monitoring via Experian.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d5 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 223 days

discovery → filing · 5 weeks / 36 days

Dec 13, 2024

Begins

Jul 24, 2025

Discovered

Aug 29, 2025

Filed

vs. sector median

14 wks faster

This filing is one of 8 records about the same incident.View merged incident

A leak claim by ransomhub about this victim was first seen 207 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteransomhubbd_dc928925f71a3d212024-12-14 · +258dVerified by operator

Regulatory filings (6) · sorted by filing gap

New Hampshire State AGbd_001747a8e045cea52025-08-29Verified
Vermont State AGbd_2ea2c73da07bd2cb2025-08-29Candidate
Indiana State AGbd_2ed7a444340d847e2025-08-29Verified
Massachusetts State AGbd_fda16316623ce6de2025-08-29Verified by operator

Show 2 more filings ↓up to 144d gap

New Hampshire State AGbd_ac8e750cbad1be1b2025-07-14 · +46dCandidate
New Hampshire State AGbd_f693e8211a6698ed2026-01-20 · +144dVerified by operator

Name: Wong Fleming
norm: wong fleming
Domain: wongfleming.com
Industry: Legal Services

Name: Wong Fleming
norm: wong fleming
Domain: wongfleming.com
Industry: Legal Services
Industry: Professional Servicesllm

Discovered: Jul 24, 2025
Breach occurred: Dec 13, 2024 – Dec 14, 2024
Undetected for: 223 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 29, 2025
Affected individuals: 2state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified Maine Attorney General
Initial access: exploit_public_facing

During the incident: Took systems offline
Assessed the security of the network
Investigated the nature and scope of the issue
Notified federal law enforcement
Cooperating with their investigation
Changes made: Reviewing policies, procedures, and security protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(36 days from discovery to filing)
Compliance flags: Leak >180dME AG >30d · 36d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jul 24, 2025
→ Filed with AG: Aug 29, 2025
36d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jul 24, 2025 → Filed with AG: Aug 29, 2025	36d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 5 states

View merged incident ↗

New Hampshire State AGJul 14 · first

New Hampshire State AG+46d

Vermont State AG+46d

Indiana State AG+46d

Massachusetts State AG+46d

Maine State AG+46d · this page

New Hampshire State AG+190d

Pattern: first filing Jul 14 (NH), last Jan 20 (NH) — a 190-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c6a5beae-5ad1-422e-b8de-3844c79f4d3d.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 29, 2025
Raw hash: e20c29bc158884f4c1fd52c9675998be32006c37c9f265e1c11d28df5bd46b17

Linked disclosures

Ransomware claims (1)

Regulatory filings (6) · sorted by filing gap

Reporting entityWong Fleming

Victim entityWong Fleming

Incidentdiscovered Jul 24, 2025

Stated responseTook systems offline

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov