HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedIdentity (basic)MediumContained

The Godwin Firm P.A.

bd_895923d4090084d8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 15, 2024

Filed

Jul 26, 2024

To disclose

11 days

Affected · nationwide

4,7083 in this filing

Linked

3 filings

Confidence

65%

Full breach record for The Godwin Firm P.A. →

The Godwin Firm P.A. experienced an external system breach (hacking) on March 1, 2024. The incident was discovered on July 15, 2024, after forensic investigation confirmed unauthorized access to client personal information (names). 4,708 individuals were affected, including 3 Maine residents. The firm engaged external cybersecurity professionals and provided 12 months of credit monitoring services.

J jump to incidentP pin to compareR raw source

Date basis clock✓ Clock withheld · confirmation date11 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 136 days

discovery → filing · 11 days

Mar 1, 2024

Begins

Jul 15, 2024

Discovered

Jul 26, 2024

Filed

vs. sector median

16 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Delaware State AGbd_cd574af64ca9939f2024-07-26Verified by operator
Massachusetts State AGbd_fb8a51c608cd05082024-07-26Verified

Name: MCDONALD HOPKINS LLC
norm: mcdonald hopkins

Name: The Godwin Firm P.A.
norm: the godwin firm
Industry: Professional Servicesllm

Discovered: Jul 15, 2024
Breach occurred: Mar 1, 2024
Undetected for: 136 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 26, 2024
Affected individuals: 4,708state + nationwide
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Filed notification with Maine Attorney General
Initial access: exploit_public_facing

During the incident: Commenced a prompt and thorough investigation with external cybersecurity professionals
Conducted an extensive forensic investigation and manual document review
Provided 12 months of free credit monitoring and identity theft protection services through Equifax Credit WatchTM Gold
Changes made: Continually evaluate and modify practices and internal controls to enhance the security and privacy of personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 days(11 days from discovery to filing)
Compliance flags: Clock withheld · confirmation date

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Delaware State AGJul 26 · first

Massachusetts State AGJul 26 · first

Maine State AGJul 26 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a797977e-acb7-4194-9763-8d1d1b555d69.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 26, 2024
Raw hash: 2641045c3b83161a26e43b0a3fecd040ffc974813d1b67abf08aa368eb32cbb7

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityMCDONALD HOPKINS LLC

Victim entityThe Godwin Firm P.A.

Incidentdiscovered Jul 15, 2024

Stated responseCommenced a prompt and thorough investigation with external cybersecurity professionals

ComplianceClock withheld · confirmation date

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov