DisclosureLens
HackingProfessional ServicesProfessional ServicesVulnerability ExploitData ExfiltratedCustomer Data InvolvedIdentity (basic)Financial accountLowContained

Kelly, Remmel & Zimmerman

bd_88434ae32ff899f1 · schema v1 · pii pii-v1

Severity

Low

Discovered

May 6, 2022

Filed

Jun 8, 2022

To disclose

5 weeks

Affected · nationwide

1312 in this filing

Confidence

64%
Full breach record for Kelly, Remmel & Zimmerman →

Kelly, Remmel & Zimmerman, a professional services firm in Portland, Maine, reported an external system breach (hacking) occurring on March 16, 2022, discovered on May 6, 2022. The incident affected 13 individuals (12 Maine residents). Acquired data included names and financial account or credit/debit card numbers (with security codes/PINs). The firm notified affected individuals in writing on June 8, 2022, and provided 24 months of credit monitoring and identity restoration through Experian.

Maine clockDiscovered May 6, 2022 → Filed with AG Jun 8, 202233d ⏱ ME AG >30d5 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 51 days
discovery → filing · 5 weeks / 33 days

Mar 16, 2022

Begins

May 6, 2022

Discovered

Jun 8, 2022

Filed

vs. sector median

14 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed13 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.