HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountCredentialsHealth (basic)MediumContained

Gleason, Flynn, Emig & Mcafee, Chartered

bd_6971fe4980de9122 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 31, 2024

Filed

May 29, 2025

To disclose

30 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

65%

Full breach record for Gleason, Flynn, Emig & Mcafee, Chartered →2 incidents on file

Gleason, Flynn, Emig & Mcafee, Chartered notified consumers of a data security incident discovered on October 31, 2024, involving unauthorized access to network files. Impacted data included names, addresses, SSNs, financial account numbers, usernames, and medical/insurance information. The firm engaged forensic experts and is offering 12 months of credit monitoring and identity theft protection via TransUnion/Cyberscout.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday30 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 30 weeks / 210 days

Oct 31, 2024

Discovered

May 29, 2025

Filed

vs. sector median

+10 wks slower

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_651a10d6e757e8842025-05-29Verified
Maine State AGbd_68c7c9c50afa8d712025-05-29Candidate
Nebraska State AGbd_f87f1d81f9fc4c302025-05-29Verified

Name: Gleason, Flynn, Emig & Mcafee, Chartered
norm: gleason flynn emig mcafee chartered

Name: Gleason, Flynn, Emig & Mcafee, Chartered
norm: gleason flynn emig mcafee chartered
Industry: Professional Servicesllm

Discovered: Oct 31, 2024
Materiality determined: —
Notification sent: May 29, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountCredentialsHealth (basic)
Data elements: Social Security numberMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial

During the incident: Implemented incident response protocols and took systems offline
Engaged external computer forensic experts to assist with the investigation
Engaged a third party to review the files and determine the individuals and data elements potentially impacted
Offering identity theft protection services through Transunion
Providing access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing proactive fraud assistance through Cyberscout
Changes made: Taken steps to prevent a similar incident from happening in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 30 weeks(210 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGMay 29 · first

Maine State AGMay 29 · first

Nebraska State AGMay 29 · first

Vermont State AGMay 29 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2025-05-29-gleason-flynn-emig-mcafee-chartered-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 29, 2025
Raw hash: 7dd9935f69a23d82ad2465234d53c6e83bcf4b4ba30c6d4ea349bb47003a8c35

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityGleason, Flynn, Emig & Mcafee, Chartered

Victim entityGleason, Flynn, Emig & Mcafee, Chartered

Incidentdiscovered Oct 31, 2024

Stated responseImplemented incident response protocols and took systems offline

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov