HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Davies, McFarland & Carroll LLC
bd_730c57b1011211ea · schema v1 · pii pii-v1
Full breach record for Davies, McFarland & Carroll LLC →Davies, McFarland & Carroll LLC reported an external system breach (hacking) occurring on May 19, 2025, discovered on May 22, 2025. The incident affected 54,712 individuals, including 4 Maine residents. Personal information, including names and government identifiers, was compromised. The firm notified affected individuals electronically on November 24, 2025, and offered TransUnion Cyberscout identity theft protection services.
Maine clockDiscovered May 22, 2025 → Filed with AG Nov 24, 2025186d ✗ ME AG >90d27 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by lynx about this victim predates this filing by 172 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_cb9011b811c83da7Leak Sitelynxfiled 2025-06-04(172d gap)Verified
Regulatory filings (2) · sorted by filing gap
- bd_30ad7f17f1f26299HHS OCRfiled 2025-11-24Verified
- bd_fe3d861d5d324329New Hampshire State AGfiled 2025-12-01(7d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/adab4e5e-168b-46e6-a4ed-5c6b84361810.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 24, 2025
- Raw hash
- 967796207b99bdf1dfa5cb26c683946eca963e7fca8032dfe424e110792f8e64
Reporting entity
- Name
- Davies, McFarland & Carroll LLCnorm: davies mcfarland carroll
Victim entity
- Name
- Davies, McFarland & Carroll LLCnorm: davies mcfarland carroll
Incident
- Discovered
- May 22, 2025
- Materiality determined
- —
- Notification sent
- Nov 24, 2025
- Affected individuals
- 54,712
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 27 weeks(186 days from discovery to filing)
- Compliance flags
- ME AG >90d · 186dME resident >180d · 186dLeak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 22, 2025→ Filed with AG: Nov 24, 2025186d 90 days ME AG >90d Maine Discovered: May 22, 2025→ Notified: Nov 24, 2025186d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.