HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Ryan, Swanson & Cleveland
bd_5aa68b9d038e576b · schema v1 · pii pii-v1
Full breach record for Ryan, Swanson & Cleveland →Ryan, Swanson, & Cleveland PLLC reported an external system breach (hacking) occurring on January 16, 2020, discovered on March 18, 2021. The incident compromised the names and Social Security Numbers of 624 individuals, including 1 Maine resident. The firm notified affected individuals in writing on April 16, 2021, and provided 12 months of credit monitoring and identity restoration services through Kroll.
Maine clockDiscovered Mar 18, 2021 → Filed with AG Apr 16, 202129d ✓ ME AG ≤30d29 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_b6678b69fe574439Oregon State AGfiled 2021-04-16Candidate
- bd_f7721e55df7d86a8Montana State AGfiled 2021-04-16Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1d296a6a-d1ac-457c-b6ae-357b56749c29.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 16, 2021
- Raw hash
- b84a9c6306fc9194b0ed6a9c4c1cc81849a91de20bf8bb6dc620ab1a1f39e65b
Reporting entity
- Name
- Ryan, Swanson & Clevelandnorm: ryan swanson cleveland
Victim entity
- Name
- Ryan, Swanson & Clevelandnorm: ryan swanson cleveland
Incident
- Discovered
- Mar 18, 2021
- Materiality determined
- —
- Notification sent
- Apr 16, 2021
- Affected individuals
- 624
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 29 days(29 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 29d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 18, 2021→ Filed with AG: Apr 16, 202129d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.