DisclosureLens
HackingProfessional ServicesProfessional ServicesHacking OtherCustomer Data InvolvedIdentity (basic)Government IDMedium

Rudman & Winchell LLC

bd_75af4b07b649b239 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 7, 2024

Filed

Apr 8, 2024

To disclose

5 weeks

Affected

107state residents only

Linked

7 records

Confidence

50%
Full breach record for Rudman & Winchell LLC →

Rudman & Winchell LLC, a law firm, reported a data breach to the Maine Attorney General's office after discovering an external system breach on March 7, 2024, which originally occurred on February 3, 2023. The breach affected 107 Maine residents, compromising their names and driver's license or non-driver identification card numbers. The company notified the affected individuals on April 5, 2024, and offered them 12 months of credit and Cyberscan monitoring services through IDX.

Leak gap clock✗ Leak >180d5 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 398 days
discovery → filing · 5 weeks / 32 days

Feb 3, 2023

Begins

Mar 7, 2024

Discovered

Apr 8, 2024

Filed

vs. sector median

15 wks faster

This filing is one of 7 records about the same incident.View merged incident
A leak claim by black_basta about this victim was first seen 388 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Show 1 more filing ↓up to 26d gap

Filing propagation · 6 filings · 5 states

View merged incident ↗
Indiana State AGMar 13 · first
Montana State AGMar 13 · first
Maine State AGMar 13 · first
Vermont State AGMar 13 · first
Massachusetts State AG+1d
Maine State AG+26d · this page

Pattern: first filing Mar 13 (IN), last Apr 8 (ME) — a 26-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.