HackingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTHigh
SMITH GAMBRELL & RUSSELL LLP
bd_a79f772ed3679018 · schema v1 · pii pii-v1
Full breach record for SMITH GAMBRELL & RUSSELL LLP →The law firm Smith, Gambrell & Russell, LLP experienced an external system breach on August 9, 2021, discovered the same day. The breach compromised the names and Social Security numbers of 19,322 individuals. The firm notified affected individuals on August 8, 2022, and offered 12 months of credit monitoring and identity restoration services through IDX.
Maine clockDiscovered Aug 9, 2021 → Filed with AG Aug 8, 2022364d ✗ ME AG >90d52 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_2b7bfafa570976dcMaine State AGfiled 2022-06-28(41d gap)Verified
- bd_eddc405cf4130570Montana State AGfiled 2022-06-28(41d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/df81bbd1-bc75-4a43-8141-71de14f7760d.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 8, 2022
- Raw hash
- 37ac97720ad3cf247b6869f5a3b47ff2911e0ceda32dbaf47c29a041a6fc03f0
Reporting entity
- Name
- SMITH GAMBRELL & RUSSELL LLPnorm: smith gambrell russell
- Domain
- sgrlaw.com
Victim entity
- Name
- SMITH GAMBRELL & RUSSELL LLPnorm: smith gambrell russell
- Domain
- sgrlaw.com
Incident
- Discovered
- Aug 9, 2021
- Materiality determined
- —
- Notification sent
- Aug 8, 2022
- Affected individuals
- 19,322
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 52 weeks(364 days from discovery to filing)
- Compliance flags
- ME AG >90d · 364dME resident >180d · 364d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 9, 2021→ Filed with AG: Aug 8, 2022364d 90 days ME AG >90d Maine Discovered: Aug 9, 2021→ Notified: Aug 8, 2022364d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.