HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Shah, Dixit & Associates PC
bd_92fd4eb43279a6cf · schema v1 · pii pii-v1
Full breach record for Shah, Dixit & Associates PC →Shah Dixit & Associates P.C. reported an external system breach (hacking) occurring on 12/22/2023, discovered on 02/26/2024. The incident affected 3,494 individuals, including 48 Maine residents. Acquired data included names and driver's license numbers. The firm provided written notification and 24 months of Kroll's identity monitoring services.
Maine clockDiscovered Feb 26, 2024 → Filed with AG Mar 8, 202411d ✓ ME AG ≤30d11 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_efc515400ed296bfNew Hampshire State AGfiled 2024-03-08Verified
- bd_f6d6259d8b60b504Indiana State AGfiled 2024-03-07(1d gap)Verified
- bd_0e7f5a9de996fdeeVermont State AGfiled 2024-02-07(30d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b4adfe2b-9a61-4f8a-932c-3e95c5c8300b.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 8, 2024
- Raw hash
- a65b8d9b21aec5aa4c6ee3f4e2918b1863daa04084ba96c11453ebb589cc25b1
Reporting entity
- Name
- Shah, Dixit & Associates PCnorm: shah dixit associates
- Domain
- shahdixit.com
Victim entity
- Name
- Shah, Dixit & Associates PCnorm: shah dixit associates
- Domain
- shahdixit.com
Incident
- Discovered
- Feb 26, 2024
- Materiality determined
- —
- Notification sent
- Mar 7, 2024
- Affected individuals
- 3,494
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 11 days(11 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 11d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 26, 2024→ Filed with AG: Mar 8, 202411d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.