Social EngineeringProfessional ServicesProfessional ServicesPhishingStolen CredentialsCustomer Data InvolvedData ExfiltratedMulti-Stage ChainPIIFINANCIALIDENTITY_GOVERNMENTPHICREDENTIALSMediumContained
Williams Hart & Boundas LLP
bd_8aca3b6fa35c5edb · schema v1 · pii pii-v1
Full breach record for Williams Hart & Boundas LLP →Williams Hart & Boundas LLP (Houston, TX law firm) had a firm email account compromised via phishing on or around April 3, 2025; discovered June 30, 2025. An unauthorized external actor accessed the account and potentially exfiltrated names, addresses, financial account numbers, driver's license numbers, SSNs, and health information. 5 Maine residents among 3,944 total affected. Law enforcement notified; 12-month Experian IdentityWorks offered.
Maine clockDiscovered Jun 30, 2025 → Filed with AG Oct 9, 2025101d ✗ ME AG >90d14 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_21d84c8d5f9d1caeNew Hampshire State AGfiled 2025-10-09Verified
- bd_be1ce8a3e21067c7Vermont State AGfiled 2025-10-13(4d gap)Verified
- bd_6e5425fc35eec9ccTexas State AGfiled 2025-09-22(17d gap)Verified
- bd_387dcfeb85167badMontana State AGfiled 2025-09-19(20d gap)Candidate
Show 1 more filing ↓Show fewer ↑up to 20d gap
- bd_ae49906292b990c4Indiana State AGfiled 2025-09-19(20d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/9ff7f4db-6386-49a9-9953-8a50c7d9be25.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 9, 2025
- Raw hash
- 291727426d21754720e43fb576291a3a8e094ce6518d246d6eea232b54ac4fcb
Reporting entity
- Name
- Williams Hart & Boundas LLPnorm: williams hart boundas
- Industry
- Legal Services
Victim entity
- Name
- Williams Hart & Boundas LLPnorm: williams hart boundas
- Industry
- Legal Services
- Industry
- Professional Servicesllm
Incident
- Discovered
- Jun 30, 2025
- Materiality determined
- —
- Notification sent
- Sep 19, 2025
- Affected individuals
- 5
- Data types
- PIIFINANCIALIDENTITY_GOVERNMENTPHICREDENTIALS
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566 PhishingT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified law enforcement
- Initial access
- phishing_link
Compliance
- Time to disclose
- 14 weeks(101 days from discovery to filing)
- Compliance flags
- ME AG >90d · 101dME resident >60d · 81d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 30, 2025→ Filed with AG: Oct 9, 2025101d 90 days ME AG >90d Maine Discovered: Jun 30, 2025→ Notified: Sep 19, 202581d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.