HackingCustomer Data InvolvedLow
Carpenter McCadden and Lane LLP
bd_558058282c1d5617 · schema v1 · pii pii-v1
Full breach record for Carpenter McCadden and Lane LLP →Carpenter, McCadden & Lane, LLP, a law firm, reported an external system breach (hacking) that occurred on April 18, 2024. The breach was discovered on March 25, 2025. The incident affected 2 Maine residents out of a total of 7,917 individuals. The firm provided written notification to affected consumers on June 2, 2025 and offered 12 months of identity theft protection services through Equifax.
Leak gap clock✗ Leak >180d10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
A leak claim by meow about this victim predates this filing by 262 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_e4793b4b76f165d1Leak Sitemeowfiled 2024-09-12(262d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/3189bef5-582d-4467-afa0-c9293faf867c.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 2, 2025
- Raw hash
- 3d387fdd73ea5a369bc5244dc799ce39418ce0c1ba1fb3f178c94f4b52929a01
Reporting entity
- Name
- Carpenter McCadden and Lane LLPnorm: carpenter mccadden and lane
- Domain
- cml-law.net
Victim entity
- Name
- Carpenter McCadden and Lane LLPnorm: carpenter mccadden and lane
- Domain
- cml-law.net
Incident
- Discovered
- Mar 25, 2025
- Materiality determined
- —
- Notification sent
- Jun 2, 2025
- Affected individuals
- 2
- Data types
- —
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 10 weeks(69 days from discovery to filing)
- Compliance flags
- Leak >180dME AG >30d · 69dME resident >60d · 69d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 25, 2025→ Filed with AG: Jun 2, 202569d 30 days (soft) ME AG >30d Maine Discovered: Mar 25, 2025→ Notified: Jun 2, 202569d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.