MalwareRansomwareData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICCriticalContained
Cohen Milstein Sellers & Toll PLLC
bd_860d35758e383966 · schema v1 · pii pii-v1
Full breach record for Cohen Milstein Sellers & Toll PLLC →Cohen Milstein Sellers & Toll PLLC reported a ransomware incident occurring on January 23, 2021, discovered on June 24, 2021. The breach affected 307,305 individuals, including 488 Maine residents. Personal information, specifically Social Security Numbers, was compromised. The firm provided 24 months of identity monitoring and restoration services via Equifax to affected parties.
Maine clockDiscovered Jun 24, 2021 → Filed with AG Jul 15, 202121d ✓ ME AG ≤30d21 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_2ae6f151c432e276California State AGfiled 2021-07-15Verified
- bd_8518bf599d30e662Montana State AGfiled 2021-07-15Candidate
- bd_8c472d6d1cbb5e86Oregon State AGfiled 2021-07-15Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c7abc826-1cbe-4767-9b7e-975e9cc743f2.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 15, 2021
- Raw hash
- d8a5f507ae1ba56aa8ffb51a34eeafadd28713f29c56f09f4685f2c6e7b5d065
Reporting entity
- Name
- Cohen Milstein Sellers & Toll PLLCnorm: cohen milstein sellers toll
Victim entity
- Name
- Cohen Milstein Sellers & Toll PLLCnorm: cohen milstein sellers toll
Incident
- Discovered
- Jun 24, 2021
- Materiality determined
- —
- Notification sent
- Jul 15, 2021
- Affected individuals
- 307,305
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 21 days(21 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 21d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 24, 2021→ Filed with AG: Jul 15, 202121d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.