HackingProfessional ServicesProfessional ServicesStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)MediumContained

Moorhead Law Group

bd_4a1f6712d4d06cd8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 8, 2024

Filed

Apr 10, 2025

To disclose

15 months

Affected · nationwide

2,5572 in this filing

Linked

5 filings

Confidence

65%

Full breach record for Moorhead Law Group →

Moorhead Law Group experienced an external system breach (hacking) involving unauthorized access to a firm email account. The incident occurred between December 26, 2023, and January 8, 2024, and was discovered on January 8, 2024. Approximately 2,557 individuals were affected, including 2 Maine residents. Affected data included names and other personal identifiers. Notices were sent on April 9, 2025, offering 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jan 8, 2024 → Filed with AG Apr 10, 2025458d ⏱ ME AG >30d15 months discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 13 days

discovery → filing · 15 months / 458 days

Dec 26, 2023

Begins

Jan 8, 2024

Discovered

Apr 10, 2025

Filed

vs. sector median

+46 wks slower

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_0dd14607423a31862025-04-10Verified
Indiana State AGbd_3d1f01cb9967bad32025-04-09 · +1dCandidate
Nebraska State AGbd_7f0cec0eb746d68d2025-04-09 · +1dVerified
New Hampshire State AGbd_9cc99cb30d7fbd8c2025-04-18 · +8dVerified

Name: Cipriani & Werner
norm: cipriani werner
Domain: c-wlaw.com

Name: Moorhead Law Group
norm: moorhead law
Industry: Professional Servicesllm

Discovered: Jan 8, 2024
Breach occurred: Dec 26, 2023 – Jan 8, 2024
Undetected for: 13 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 9, 2025
Affected individuals: 2,557state + nationwide
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Initial access: valid_credentials

During the incident: Worked with third-party specialists to ensure a comprehensive response
Worked to identify the data potentially at risk to conduct a thorough review
Secured our accounts and systems
Enhanced the security of our network
Arranged for you to enroll, at no cost to you, in an online identity monitoring and protection services for a period of twelve (12) months
Changes made: Secured our accounts and systems
Enhanced the security of our network to prevent similar incidents from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 months(458 days from discovery to filing)
Compliance flags: ME AG >30d · 458dME resident >60d · 457d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jan 8, 2024
→ Filed with AG: Apr 10, 2025
458d 30 days (soft) ME AG >30d
Maine
Discovered: Jan 8, 2024
→ Notified: Apr 9, 2025
457d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jan 8, 2024 → Filed with AG: Apr 10, 2025	458d	30 days (soft)	ME AG >30d
Maine	Discovered: Jan 8, 2024 → Notified: Apr 9, 2025	457d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGApr 9 · first

Nebraska State AGApr 9 · first

Massachusetts State AG+1d

Maine State AG+1d · this page

New Hampshire State AG+9d

Pattern: first filing Apr 9 (IN), last Apr 18 (NH) — a 9-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/12cbcf32-6cb1-4987-a348-11491bba1325.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 10, 2025
Raw hash: 7e902f73021bbb409d1c0e96a4577d5ef97eef9d9d7c00527cb63a0f9b2f3a93

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityCipriani & Werner

Victim entityMoorhead Law Group

Incidentdiscovered Jan 8, 2024

Stated responseWorked with third-party specialists to ensure a comprehensive response

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov