HackingProfessional ServicesProfessional ServicesDelayed DiscoveryIdentity (basic)Government IDMediumContained

Christopher L. Mewborn, Attorney, P.A. d/b/a Mewborn & DeSelms, Attorneys at Law

bd_44c78db0db8b6e52 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 2, 2024

Filed

Feb 10, 2025

To disclose

45 weeks

Affected

Not disclosed

Linked

5 filings

Confidence

64%

Full breach record for Christopher L. Mewborn, Attorney, P.A. d/b/a Mewborn & DeSelms, Attorneys at Law →

Mewborn & DeSelms, Attorneys at Law, notified consumers of a data security incident. Unauthorized access to files containing names and Social Security Numbers occurred on May 30, 2024, discovered April 2, 2024. The firm engaged cybersecurity specialists and is offering 12 months of credit monitoring and fraud assistance via Cyberscout. No evidence of misuse was found.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday45 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

May 30, 2024

Begins

Feb 7, 2025

Scope determined

Feb 10, 2025

Filed

vs. sector median

+27 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_d4f1aaf8328bfb592025-02-10Verified by operator
Maryland State AGbd_9d2e58a70fe957622025-02-08 · +2dVerified
Montana State AGbd_fd5d1af663332d262025-02-08 · +2dCandidate
New Hampshire State AGbd_709c51918e5320a92025-02-07 · +3dVerified

Name: Christopher L. Mewborn, Attorney, P.A. d/b/a Mewborn & DeSelms, Attorneys at Law
norm: christopher l mewborn attorney pa d b a mewborn deselms attorneys at law

Name: Christopher L. Mewborn, Attorney, P.A. d/b/a Mewborn & DeSelms, Attorneys at Law
norm: christopher l mewborn attorney pa d b a mewborn deselms attorneys at law
Also named: Christopher L. Mewborn, Attorney, P.A.dba oflegal entity
Mewborn & DeSelms, Attorneys at Lawdba oftrade name
Industry: Professional Servicesllm

Discovered: Apr 2, 2024
Breach occurred: May 30, 2024
Materiality determined: Feb 7, 2025
Notification sent: Feb 7, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Engaged cybersecurity specialists to assist with the process
Providing access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing proactive fraud assistance through Cyberscout
Changes made: Implemented measures to enhance security and minimize the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 45 weeks(314 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

New Hampshire State AGFeb 7 · first

Maryland State AG+1d

Montana State AG+1d

Maine State AG+3d

Vermont State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2025-02-10-mewborn-deselms-attorneys-law-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 10, 2025
Raw hash: 28d50875dd48030ad1906c4af9f2c13de8d5cd76cc5c420cf3e50b0e2f3d8a5a

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityChristopher L. Mewborn, Attorney, P.A. d/b/a Mewborn & DeSelms, Attorneys at Law

Victim entityChristopher L. Mewborn, Attorney, P.A. d/b/a Mewborn & DeSelms, Attorneys at Law

Incidentdiscovered Apr 2, 2024

Stated responseEngaged cybersecurity specialists to assist with the process

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov