MalwareProfessional ServicesProfessional ServicesRansomwareData ExfiltratedRansom DemandedIdentity (basic)Government IDPIIMediumContained

Devine, Millimet & Branch, P.A

bd_526cf311fcff673b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 24, 2020

Filed

Dec 18, 2020

To disclose

17 weeks

Affected

2state residents only

Linked

5 filings

Confidence

63%

Full breach record for Devine, Millimet & Branch, P.A →3 incidents on file

Devine, Millimet & Branch, P.A. notified clients and employees of a ransomware attack discovered on August 24, 2020. The attack began on August 13, 2020, and resulted in the potential exfiltration of client and employee information, including SSNs and DOBs. The firm engaged forensic consultants, notified the FBI, and offered 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 11 days

discovery → filing · 17 weeks / 116 days

Aug 13, 2020

Begins

Aug 24, 2020

Discovered

Dec 18, 2020

Filed

vs. sector median

2 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_2af13a7d81f0ffa12020-12-18Candidate
Massachusetts State AGbd_ae982838afbc391f2020-12-18Verified
Indiana State AGbd_c0cab53e8bd718fd2020-12-18Verified
New Hampshire State AGbd_5f74f79fcbbe19db2021-01-04 · +17dVerified

Name: Devine, Millimet & Branch, P.A
norm: devine millimet branch

Name: Devine, Millimet & Branch, P.A
norm: devine millimet branch
Industry: Professional Servicesllm

Discovered: Aug 24, 2020
Breach occurred: Aug 13, 2020
Undetected for: 11 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 20, 2020
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDPII
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Reported the attack to the Federal Bureau of Investigation Cyber Crimes Unit

During the incident: Retained a third party forensic consultant to investigate the attack
Reported the attack to the Federal Bureau of Investigation Cyber Crimes Unit
Installed additional security software to enhance threat protection
Took steps to prevent the distribution of any data that may have been removed
Offering complimentary access to twenty-four (24) months of credit monitoring and identity theft restoration services through TransUnion
Changes made: Installed additional security software to enhance threat protection
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(116 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Maine State AGDec 18 · first

Massachusetts State AGDec 18 · first

Indiana State AGDec 18 · first

Montana State AGDec 18 · first · this page

New Hampshire State AG+17d

Pattern: first filing Dec 18 (ME), last Jan 4 (NH) — a 17-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/devSamp.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 18, 2020
Raw hash: 98631faec995dfb12ff862e2d3e98a61dc2e9544aacb095687ec625e7ee58ef3

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityDevine, Millimet & Branch, P.A

Victim entityDevine, Millimet & Branch, P.A

Incidentdiscovered Aug 24, 2020

Stated responseRetained a third party forensic consultant to investigate the attack

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov