Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICCREDENTIALSLowContained
Mehri & Skalet, PLLC
bd_9cf4ddaaeb5ee73e · schema v1 · pii pii-v1
Full breach record for Mehri & Skalet, PLLC →Mehri & Skalet, PLLC notified consumers of a cybersecurity incident where an unauthorized actor accessed an employee's email account on December 17, 2024, following suspicious activity identified on May 20, 2025. The actor downloaded information including names and variable data elements. The firm reported the incident to law enforcement, secured its email tenant, and is offering complimentary identity protection and credit monitoring services to affected individuals.
Vermont clock✗ VT AG >45 bday22 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 12 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_3954de5decc55d14Indiana State AGfiled 2025-10-24Verified
- bd_686937ac8f09c1a7Maine State AGfiled 2025-10-24Candidate
- bd_31c871a13a7830fcTexas State AGfiled 2025-10-27(3d gap)Verified by operator
- bd_1719c1d7fddc8b28New Hampshire State AGfiled 2025-11-19(26d gap)Verified
Show 6 more filings ↓Show fewer ↑up to 28d gap
- bd_5df6d7b3c0b9ba81California State AGfiled 2025-11-19(26d gap)Verified
- bd_b406afafefa33a19Maine State AGfiled 2025-11-19(26d gap)Verified
- bd_cb3366655b70e060Montana State AGfiled 2025-11-19(26d gap)Verified by operator
- bd_cf0ce5346c65cf8dWashington State AGfiled 2025-11-19(26d gap)Verified
- bd_f6eee11cd806a2d8Vermont State AGfiled 2025-11-19(26d gap)Verified
- bd_c2275bbda62bc31bTexas State AGfiled 2025-11-21(28d gap)Verified by operator
Showing first 10 of 11 linked disclosures.
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-10-24-mehri-skalet-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 24, 2025
- Raw hash
- d655799008ff38c8e151b27a77d77a8032eef29c1235ea835e676ef10b1dd560
Reporting entity
- Name
- Mehri & Skalet, PLLCnorm: mehri skalet
- Domain
- findjustice.com
Victim entity
- Name
- Mehri & Skalet, PLLCnorm: mehri skalet
- Domain
- findjustice.com
Incident
- Discovered
- May 20, 2025
- Materiality determined
- —
- Notification sent
- Oct 24, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Reported this event to law enforcement and is cooperating with their investigation
- Initial access
- phishing_link
Compliance
- Time to disclose
- 22 weeks(157 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.