HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedDelayed DiscoveryPIILowResolved
Wade Clark Mulcahy LLP
bd_a04961facbb6c27b · schema v1 · pii pii-v1
Full breach record for Wade Clark Mulcahy LLP →Wade Clark Mulcahy LLP, a New York-based law firm, experienced unauthorized access to its network between August 25–28, 2025, discovered on August 28, 2025. A review completed February 13, 2026 identified potentially affected personal information. One Maine resident was among 716 total individuals notified on February 26, 2026. The firm reset passwords, notified law enforcement, reviewed security policies, and offered 12 months of TransUnion credit monitoring via Cyberscout.
Maine clockDiscovered Aug 28, 2025 → Filed with AG Mar 9, 2026193d ✗ ME AG >90d28 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_52cb7196ea33ba61Massachusetts State AGfiled 2026-05-01(53d gap)Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c01462de-3b11-4909-9d87-d7688af1cf39.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 9, 2026
- Raw hash
- 50d160d10c59101ab4d09759bdb2ec8fa20ad4067584f8dbd9d39d7121f74f57
Reporting entity
- Name
- Wade Clark Mulcahy LLPnorm: wade clark mulcahy
- Domain
- wcmlaw.com
- Industry
- Legal Services
Victim entity
- Name
- Wade Clark Mulcahy LLPnorm: wade clark mulcahy
- Domain
- wcmlaw.com
- Industry
- Legal Services
- Industry
- Professional Servicesllm
Incident
- Discovered
- Aug 28, 2025
- Materiality determined
- Feb 13, 2026
- Notification sent
- Feb 26, 2026
- Affected individuals
- 1
- Data types
- PII
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 28 weeks(193 days from discovery to filing)
- Compliance flags
- ME AG >90d · 193dME resident >180d · 182d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 28, 2025→ Filed with AG: Mar 9, 2026193d 90 days ME AG >90d Maine Discovered: Aug 28, 2025→ Notified: Feb 26, 2026182d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.