HackingCustomer Data InvolvedPIIFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowResolved
CHRISTENSEN O'CONNOR JOHNSON KINDNESS PLLC
bd_9673e89026567e55 · schema v1 · pii pii-v1
Full breach record for CHRISTENSEN O'CONNOR JOHNSON KINDNESS PLLC →Christensen O’Connor Johnson Kindness PLLC, a professional services firm, experienced an external system breach on December 24, 2020. The breach, discovered the same day, resulted in the compromise of names and financial account numbers with access codes for 907 individuals, including one resident of Maine. The company began notifying affected individuals on November 10, 2021, and offered 12 months of identity theft protection and credit monitoring services.
Maine clockDiscovered Dec 24, 2020 → Filed with AG Nov 10, 2021321d ✗ ME AG >90d46 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_41fd0a2bda319dffWashington State AGfiled 2021-11-10Candidate
- bd_d037123510d095feMontana State AGfiled 2021-11-10Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/36c4902a-bfb3-4c7f-a25e-3924e1275046.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 10, 2021
- Raw hash
- bc0c9db2ba6677ace722d54d95fc35699f0bc81752eb27a974cac66451bf682a
Reporting entity
- Name
- CHRISTENSEN O'CONNOR JOHNSON KINDNESS PLLCnorm: christensen o connor johnson kindness
Victim entity
- Name
- CHRISTENSEN O'CONNOR JOHNSON KINDNESS PLLCnorm: christensen o connor johnson kindness
Incident
- Discovered
- Dec 24, 2020
- Materiality determined
- —
- Notification sent
- Nov 10, 2021
- Affected individuals
- 1
- Data types
- PIIFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 46 weeks(321 days from discovery to filing)
- Compliance flags
- ME AG >90d · 321dME resident >180d · 321d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 24, 2020→ Filed with AG: Nov 10, 2021321d 90 days ME AG >90d Maine Discovered: Dec 24, 2020→ Notified: Nov 10, 2021321d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.