HackingProfessional ServicesProfessional ServicesData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountFinancial credentialsHealth (basic)PHIHighContained

DelBello Donnellan Weingarten Wise & Wiederkehr, LLP

bd_453cf90e38d83a3e · schema v1 · pii pii-v1

Severity

High

Discovered

Aug 19, 2024

Filed

Oct 1, 2025

To disclose

14 months

Affected · nationwide

1,1941 in this filing

Linked

6 filings

Confidence

66%

Full breach record for DelBello Donnellan Weingarten Wise & Wiederkehr, LLP →

DelBello Donnellan Weingarten Wise & Wiederkehr, LLP, a law firm, disclosed a data breach affecting 1,194 individuals, including 1 Maine resident. The firm discovered suspicious activity on August 19, 2024, which led to the determination that unauthorized parties acquired personal information including names, SSNs, driver's licenses, payment card data, and medical/health insurance information. Notifications were sent on October 1, 2025, offering 12 months of credit monitoring and identity protection services.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Aug 19, 2024 → Filed with AG Oct 1, 2025408d ✗ ME AG >90d14 months discovery → filing

Incident timeline

discovery → filing · 14 months / 408 days

Aug 19, 2024

Discovered

Oct 1, 2025

Filed

vs. sector median

+40 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Nebraska State AGbd_4c1a47ab9a2f6e1b2025-10-01Verified
New Hampshire State AGbd_e59c5dc7726ed52f2025-10-01Verified
Indiana State AGbd_f49d602469a3a9342025-10-01Verified
Vermont State AGbd_f5d96cbfdd00b5902025-10-01Verified

Show 1 more filing ↓up to 2d gap

Massachusetts State AGbd_5214009e716f45812025-10-03 · +2dVerified

Name: DelBello Donnellan Weingarten Wise & Wiederkehr, LLP
norm: delbello donnellan weingarten wise wiederkehr

Name: DelBello Donnellan Weingarten Wise & Wiederkehr, LLP
norm: delbello donnellan weingarten wise wiederkehr
Industry: Professional Servicesllm

Discovered: Aug 19, 2024
Materiality determined: —
Notification sent: Oct 1, 2025
Affected individuals: 1,194state + nationwide
Data types: Identity (basic)Government IDFinancial accountFinancial credentialsHealth (basic)PHI
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Filed notification with Maine Attorney General
Initial access: exploit_public_facing

During the incident: Engaged independent cybersecurity experts to assist with the investigation
Conducted a comprehensive review of the affected data
Provided access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Provided proactive fraud assistance through Cyberscout
Changes made: Implemented measures to enhance security and minimize the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 months(408 days from discovery to filing)
Compliance flags: ME AG >90d · 408dME resident >180d · 408d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Aug 19, 2024
→ Filed with AG: Oct 1, 2025
408d 90 days ME AG >90d
Maine
Discovered: Aug 19, 2024
→ Notified: Oct 1, 2025
408d 180 days ME resident >180d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Aug 19, 2024 → Filed with AG: Oct 1, 2025	408d	90 days	ME AG >90d
Maine	Discovered: Aug 19, 2024 → Notified: Oct 1, 2025	408d	180 days	ME resident >180d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Nebraska State AGOct 1 · first

New Hampshire State AGOct 1 · first

Indiana State AGOct 1 · first

Vermont State AGOct 1 · first

Maine State AGOct 1 · first · this page

Massachusetts State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/2bc45bbb-5959-46d6-902b-1107c4efec88.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 1, 2025
Raw hash: 0e11aae58e14923ed48e84bd81e1a1597b575bd6f65a7efa5049b1d01148b576

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityDelBello Donnellan Weingarten Wise & Wiederkehr, LLP

Victim entityDelBello Donnellan Weingarten Wise & Wiederkehr, LLP

Incidentdiscovered Aug 19, 2024

Stated responseEngaged independent cybersecurity experts to assist with the investigation

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov