HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
McGivney, Kluger, Clark & Intoccia, P.C.
bd_7b0d9d723a6a8a82 · schema v1 · pii pii-v1
Full breach record for McGivney, Kluger, Clark & Intoccia, P.C. →McGivney, Kluger, Clark & Intoccia, P.C. reported an external system breach (hacking) occurring on November 30, 2022, discovered on May 1, 2023. The incident affected 1,590 individuals, including 6 Maine residents. Acquired data included names and Social Security Numbers. The firm notified affected individuals in writing on May 26, 2023, and provided 12 months of identity theft protection services through IDX.
Maine clockDiscovered May 1, 2023 → Filed with AG May 26, 202325d ✓ ME AG ≤30d25 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_0ccaf36ef44971d8New Hampshire State AGfiled 2023-05-31(5d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/cd03cd65-0e77-44da-9a50-576837b5dd2a.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 26, 2023
- Raw hash
- 58eb3548bf2df6ec6fcfcbb49092dbfa8d791b46ea9d793aa3633a10fea68583
Reporting entity
- Name
- McGivney, Kluger, Clark & Intoccia, P.C.norm: mcgivney kluger clark intoccia
Victim entity
- Name
- McGivney, Kluger, Clark & Intoccia, P.C.norm: mcgivney kluger clark intoccia
Incident
- Discovered
- May 1, 2023
- Materiality determined
- —
- Notification sent
- May 26, 2023
- Affected individuals
- 1,590
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 25 days(25 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 25d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 1, 2023→ Filed with AG: May 26, 202325d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.