HackingProfessional ServicesProfessional ServicesCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIPHIIDENTITY_GOVERNMENTMediumContained
Mendes & Mount LLP
bd_936791d6ec48dffb · schema v1 · pii pii-v1
Full breach record for Mendes & Mount LLP →On February 1, 2024, unauthorized actors copied files from Mendes & Mount LLP's network without authorization. The breach was discovered on December 5, 2024 after a comprehensive review of impacted files. Affected data includes names, Social Security numbers, and medical information. Two Maine residents were notified on February 12, 2025. Total affected individuals: 382. Credit monitoring (12 months, TransUnion via CyberScout) was offered to affected individuals.
Maine clockDiscovered Dec 5, 2024 → Filed with AG Feb 12, 202569d ⏱ ME AG >30d10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_1fd05991781053d9Maryland State AGfiled 2025-02-12Verified
- bd_522e0f97df551417New Hampshire State AGfiled 2025-02-12Verified
- bd_76f848557682d64dMontana State AGfiled 2025-02-12Candidate
- bd_9e486b2187025f09Indiana State AGfiled 2025-02-12Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1612e4b6-eb2c-4c7c-bd7e-fb95dfec6731.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 12, 2025
- Raw hash
- 9a111476179445055e92a0781ae3921715f22b3b74935b8c18ef8643158ab575
Reporting entity
- Name
- Mendes & Mount LLPnorm: mendes mount
- Domain
- mendes.com
- Industry
- Legal Services
Victim entity
- Name
- Mendes & Mount LLPnorm: mendes mount
- Domain
- mendes.com
- Industry
- Legal Services
- Industry
- Professional Servicesllm
Incident
- Discovered
- Dec 5, 2024
- Materiality determined
- —
- Notification sent
- Feb 12, 2025
- Affected individuals
- 2
- Data types
- PIIPHIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified Maine Attorney GeneralNotified federal law enforcement
Compliance
- Time to disclose
- 10 weeks(69 days from discovery to filing)
- Compliance flags
- ME AG >30d · 69dME resident >60d · 69d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 5, 2024→ Filed with AG: Feb 12, 202569d 30 days (soft) ME AG >30d Maine Discovered: Dec 5, 2024→ Notified: Feb 12, 202569d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.