HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedPIIIdentity (basic)LowContained

Carter Mario Law Firm

bd_5e2a8253e937f2f2 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 22, 2023

Filed

Aug 21, 2023

To disclose

30 weeks

Affected

14state residents only

Linked

5 filings

Confidence

67%

Full breach record for Carter Mario Law Firm →

Carter Mario Law Firm notified the NH AG of unauthorized access to its systems discovered on Jan 22, 2023. 14 NH residents affected. PII potentially accessed. Forensic investigators engaged. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 30 weeks / 211 days

Jan 22, 2023

Discovered

Aug 21, 2023

Filed

vs. sector median

+12 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_d8a93f8427d314e42023-08-22 · +1dVerified
Montana State AGbd_14936719d3311f6b2023-08-15 · +6dCandidate
Indiana State AGbd_5666c31a7b6213042023-08-15 · +6dVerified
Maine State AGbd_bf0384cf06ddfddf2023-08-15 · +6dVerified by operator

Name: Cipriani
norm: cipriani
Domain: cipriani.com

Name: Carter Mario Law Firm
norm: carter mario law firm
Industry: Professional Servicesllm

Discovered: Jan 22, 2023
Materiality determined: —
Notification sent: Aug 15, 2023
Affected individuals: 14state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Office of Attorney General

During the incident: Secured its systems
Engaged a third-party forensic firm to investigate the incident
Secured its network
Engaged a third-party team of forensic investigators
Changes made: Enhance the security of the network to prevent similar incidents from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 30 weeks(211 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGAug 15 · first

Indiana State AGAug 15 · first

Maine State AGAug 15 · first

New Hampshire State AG+6d · this page

Massachusetts State AG+7d

Pattern: first filing Aug 15 (MT), last Aug 22 (MA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/carter-mario-law-firm-20230821.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 21, 2023
Raw hash: b4316642a8e58740ab51005fe9c8bf88f02cc74706687515d6768bbd1efc48ef

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityCipriani

Victim entityCarter Mario Law Firm

Incidentdiscovered Jan 22, 2023

Stated responseSecured its systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov