HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Fleming
bd_3c0fd6238ccfa2de · schema v1 · pii pii-v1
Full breach record for Fleming →Fleming, Nolen & Jez, LLP, a Houston-based law firm, reported an external system breach (hacking) occurring on February 6, 2023. The incident compromised the names and driver's license numbers of 17,000 individuals, including 58 Maine residents. The firm notified affected individuals via email and mail on March 2, 2023, and provided 24 months of credit monitoring and identity theft protection services through IDX.
Maine clockDiscovered Feb 6, 2023 → Filed with AG Mar 6, 202328d ✓ ME AG ≤30d28 days discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_07f176d7f6cb2ed4New Hampshire State AGfiled 2023-03-06Verified
- bd_e33be3110715a48cCalifornia State AGfiled 2023-03-06Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/2c6748a5-7fe7-4b96-b1b7-f19f9654ad21.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 6, 2023
- Raw hash
- 6c0298990141f815f6e9864261fc8ae4bff367205461ead2bfbf259df2c934a2
Reporting entity
- Name
- Flemingnorm: fleming
- Domain
- fleming-law.com
Victim entity
- Name
- Flemingnorm: fleming
- Domain
- fleming-law.com
Incident
- Discovered
- Feb 6, 2023
- Materiality determined
- —
- Notification sent
- Mar 2, 2023
- Affected individuals
- 17,000
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 28d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 6, 2023→ Filed with AG: Mar 6, 202328d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.