DisclosureLens
HackingIdentity (basic)Financial accountFinancial credentialsMediumResolved

Goosmann Rose Colvard & Cramer P.A.

bd_9907d14a4c4ce13d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 7, 2022

Filed

Apr 1, 2022

To disclose

8 weeks

Affected · nationwide

1,4172 in this filing

Linked

4 filings

Confidence

50%
Full breach record for Goosmann Rose Colvard & Cramer P.A.

An external hacking incident at the law firm Goosmann Rose Colvard & Cramer P.A. occurred between July 30, 2021, and August 16, 2021. The breach was discovered on February 7, 2022. The compromised information includes names and financial account or credit/debit card numbers with their corresponding security codes or PINs. Two residents of Maine were among the 1,417 total individuals affected. The firm provided written notification to those affected on March 21, 2022, and offered 12 months of credit and identity monitoring services.

Maine clockDiscovered Feb 7, 2022Filed with AG Apr 1, 202253d ME AG >30d8 weeks discovery → filing
AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 192 days
discovery → filing · 8 weeks / 53 days

Jul 30, 2021

Begins

Feb 7, 2022

Discovered

Apr 1, 2022

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Filing propagation · 4 filings · 4 states

View merged incident ↗
Montana State AGMar 21 · first
Indiana State AGMar 21 · first
Maine State AG+11d · this page

Pattern: first filing Mar 21 (MT), last Apr 1 (ME) — a 11-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.