HackingCustomer Data InvolvedLowContained
The Vernon Law Firm, A Professional Association
bd_6dce7abb360d939b · schema v1 · pii pii-v1
Full breach record for The Vernon Law Firm, A Professional Association →The Vernon Law Firm, a professional association based in North Carolina, reported a data breach affecting 781 individuals, including one resident of Maine. The breach, described as an external system hacking incident, occurred between December 10, 2024, and March 4, 2025, and was discovered on November 4, 2025. The firm began notifying affected individuals on December 15, 2025, and is offering 12 months of complimentary credit monitoring and identity theft protection services through Cyberscout, a TransUnion company.
Maine clockDiscovered Nov 4, 2025 → Filed with AG Dec 17, 202543d ⏱ ME AG >30d6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d639f67b-b70b-447f-a6d0-25d50c6a6dfc.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 17, 2025
- Raw hash
- 693cc67f272b5a3807a5e74ec97e42e58f6e773fabee1ed89b28c9d74b91db65
Reporting entity
- Name
- The Vernon Law Firm, A Professional Associationnorm: the vernon law firm a professional
Victim entity
- Name
- The Vernon Law Firm, A Professional Associationnorm: the vernon law firm a professional
Incident
- Discovered
- Nov 4, 2025
- Materiality determined
- —
- Notification sent
- Dec 15, 2025
- Affected individuals
- 1
- Data types
- —
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 6 weeks(43 days from discovery to filing)
- Compliance flags
- ME AG >30d · 43d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 4, 2025→ Filed with AG: Dec 17, 202543d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.