HackingProfessional ServicesProfessional ServicesStolen CredentialsCapture App DataCustomer Data InvolvedDelayed DiscoveryPIILowContained
Gislason & Hunter LLP
bd_5a562687719bf1c5 · schema v1 · pii pii-v1
Full breach record for Gislason & Hunter LLP →Gislason & Hunter LLP, a law firm based in New Ulm, MN, discovered on October 11, 2024, that an unknown party accessed an employee email account without authorization between September 26 and October 9, 2024. The firm engaged third-party cybersecurity specialists, terminated access to the account, and reviewed its contents. 252 individuals were affected in total, including 2 Maine residents. Credit monitoring services were offered via TransUnion/Cyberscout for 12 months.
Maine clockDiscovered Oct 11, 2024 → Filed with AG Feb 11, 2025123d ✗ ME AG >90d18 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/2594c289-14c2-48db-84e5-1cd38527fd70.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 11, 2025
- Raw hash
- 7b55df44f17aa9cbbe8c3755ac114e8b904fbb56e53b94614c0584de7aa67918
Reporting entity
- Name
- Gislason & Hunter LLPnorm: gislason hunter
- Industry
- Legal Services
Victim entity
- Name
- Gislason & Hunter LLPnorm: gislason hunter
- Industry
- Legal Services
- Industry
- Professional Servicesllm
Incident
- Discovered
- Oct 11, 2024
- Materiality determined
- —
- Notification sent
- Feb 10, 2025
- Affected individuals
- 2
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 18 weeks(123 days from discovery to filing)
- Compliance flags
- ME AG >90d · 123dME resident >60d · 122d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 11, 2024→ Filed with AG: Feb 11, 2025123d 90 days ME AG >90d Maine Discovered: Oct 11, 2024→ Notified: Feb 10, 2025122d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.