DisclosureLens
HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Stevens & Lee, P.C.

bd_4656c94467fb53f8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 28, 2021

Filed

Apr 8, 2022

To disclose

41 weeks

Affected

396state residents only

Linked

9 filings

Confidence

67%
Full breach record for Stevens & Lee, P.C.

Stevens & Lee, a Pennsylvania law firm, notified the New Hampshire Attorney General of a data breach discovered on June 28, 2021. Unauthorized access to systems may have exposed names, driver's license numbers, and Social Security numbers of 396 NH residents. Notifications were sent on April 7, 2022. The firm engaged forensic investigators and law enforcement, enhanced network security, and provided 24 months of credit monitoring and identity restoration services through IDX.

Incident timeline

discovery → filing · 41 weeks / 284 days

Jun 28, 2021

Discovered

Apr 8, 2022

Filed

vs. sector median

+23 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Show 4 more filingsup to 101d gap

Filing propagation · 9 filings · 7 states

View merged incident ↗

Pattern: first filing Dec 28 (ME), last Apr 11 (ME) — a 104-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.