HackingProfessional ServicesProfessional ServicesStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)HighContained

Rodenburg Law Firm

bd_a5c6dca43ebda5f7 · schema v1 · pii pii-v1

Severity

High

Discovered

Aug 26, 2025

Filed

Apr 24, 2026

To disclose

34 weeks

Affected · nationwide

81,30717 in this filing

Linked

10 filings

Confidence

65%

Full breach record for Rodenburg Law Firm →

Rodenburg Law Firm experienced an unauthorized access incident on August 26, 2025. An unknown third party accessed the network, exposing names, SSNs, DOBs, payment card numbers, and medical information of 81,307 individuals. The firm engaged cybersecurity experts and notified law enforcement. Affected individuals received notification on April 21, 2026, and were offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Aug 26, 2025 → Filed with AG Apr 24, 2026241d ✗ ME AG >90d34 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 34 weeks / 241 days

Aug 26, 2025

Begins

Aug 26, 2025

Discovered

Apr 24, 2026

Filed

vs. sector median

+17 wks slower

This filing is one of 10 about the same incident.View merged incident

A leak claim by akira about this victim predates this filing by 136 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteakirabd_1a74bcdfcf80c00e2025-12-09 · +136dVerified by operator

Regulatory filings (8) · sorted by filing gap

Montana State AGbd_2ad9293ec709d4c32026-04-24Verified
Texas State AGbd_53c4f9349bf31efa2026-04-24Verified
Massachusetts State AGbd_7a68daed0d73bc122026-04-24Verified by operator
Indiana State AGbd_10184fd32a2663bc2026-04-21 · +3dVerified

Show 4 more filings ↓up to 69d gap

Indiana State AGbd_af98f5f1e940fea22026-04-21 · +3dVerified by operator
Nebraska State AGbd_dbfcebfb506b42e42026-04-21 · +3dVerified
New Hampshire State AGbd_024bc57dbb83a9872026-04-30 · +6dVerified by operator
California State AGbd_2cb09808286009aa2026-07-02 · +69dVerified by operator

Name: Rodenburg Law Firm
norm: rodenburg law firm
Domain: rodenburgllp.com

Name: Rodenburg Law Firm
norm: rodenburg law firm
Domain: rodenburgllp.com
Industry: Professional Servicesllm

Discovered: Aug 26, 2025
Breach occurred: Aug 26, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 21, 2026
Affected individuals: 81,307state + nationwide
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Filed notification with Maine Attorney General
Initial access: valid_credentials

During the incident: Launched an investigation to understand the scope of the issue
Engaged the appropriate cybersecurity experts to assist
Notified law enforcement
Changes made: Providing 12-24 months of credit monitoring and identity theft services through TransUnion
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 34 weeks(241 days from discovery to filing)
Compliance flags: ME AG >90d · 241dME resident >180d · 238dLeak >90d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Aug 26, 2025
→ Filed with AG: Apr 24, 2026
241d 90 days ME AG >90d
Maine
Discovered: Aug 26, 2025
→ Notified: Apr 21, 2026
238d 180 days ME resident >180d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Aug 26, 2025 → Filed with AG: Apr 24, 2026	241d	90 days	ME AG >90d
Maine	Discovered: Aug 26, 2025 → Notified: Apr 21, 2026	238d	180 days	ME resident >180d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 8 states

View merged incident ↗

Indiana State AGApr 21 · first

Nebraska State AGApr 21 · first

Montana State AG+3d

Texas State AG+3d

Massachusetts State AG+3d

Maine State AG+3d · this page

New Hampshire State AG+9d

California State AG+72d

Pattern: first filing Apr 21 (IN), last Jul 2 (CA) — a 72-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f99364a5-bedd-48b1-9326-e5da5d74fccd.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 24, 2026
Raw hash: f54ec038fe51c60c05999a831cc4f57c61ad29748f4da9d0113373b614647d97

Linked disclosures

Ransomware claims (1)

Regulatory filings (8) · sorted by filing gap

Reporting entityRodenburg Law Firm

Victim entityRodenburg Law Firm

Incidentdiscovered Aug 26, 2025

Stated responseLaunched an investigation to understand the scope of the issue

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov