HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHighContained
Sewell & Neal PLLC
bd_afde3bd94c1dc3f9 · schema v1 · pii pii-v1
Full breach record for Sewell & Neal PLLC →Sewell & Neal, PLLC, a Kentucky-based professional services firm, reported an external system breach (hacking) occurring on November 22, 2021, discovered on July 29, 2022. The incident affected 14,292 individuals, including 56 Maine residents. Compromised data included names, Social Security numbers, and financial account or credit/debit card numbers (with security codes/PINs). The firm provided written notification and offered identity theft protection services.
Maine clockDiscovered Jul 29, 2022 → Filed with AG Aug 26, 202228d ✓ ME AG ≤30d28 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_a70b2944afa6e448New Hampshire State AGfiled 2022-08-26Verified
- bd_d6e430da47143df4Montana State AGfiled 2022-08-26Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a7d31628-635c-46e2-af4f-925f994c2ffa.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 26, 2022
- Raw hash
- 246dda75307048451d6e3480f9ca2fe026e307f9a018a3abc1431c5a7266e64c
Reporting entity
- Name
- Sewell & Neal PLLCnorm: sewell neal
Victim entity
- Name
- Sewell & Neal PLLCnorm: sewell neal
Incident
- Discovered
- Jul 29, 2022
- Materiality determined
- —
- Notification sent
- Aug 26, 2022
- Affected individuals
- 14,292
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 28d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 29, 2022→ Filed with AG: Aug 26, 202228d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.