HackingProfessional ServicesProfessional ServicesStolen CredentialsCapture App DataCustomer Data InvolvedData ExfiltratedDelayed DiscoveryPIILowContained
Mehri & Skalet, PLLC
bd_b406afafefa33a19 · schema v1 · pii pii-v1
Full breach record for Mehri & Skalet, PLLC →Mehri & Skalet, PLLC, a Washington DC law firm, discovered on May 20, 2025 that an unauthorized actor had accessed an employee email account and downloaded information on December 17, 2024. The firm secured its email tenant, launched an investigation, and notified 107 Maine residents. Affected individuals were offered 12 months of IDX identity protection and credit monitoring services.
Maine clockDiscovered May 20, 2025 → Filed with AG Nov 19, 2025183d ✗ ME AG >90d26 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 12 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_1719c1d7fddc8b28New Hampshire State AGfiled 2025-11-19Verified
- bd_5df6d7b3c0b9ba81California State AGfiled 2025-11-19Verified
- bd_cb3366655b70e060Montana State AGfiled 2025-11-19Verified by operator
- bd_cf0ce5346c65cf8dWashington State AGfiled 2025-11-19Verified
Show 6 more filings ↓Show fewer ↑up to 26d gap
- bd_f6eee11cd806a2d8Vermont State AGfiled 2025-11-19Verified
- bd_c2275bbda62bc31bTexas State AGfiled 2025-11-21(2d gap)Verified by operator
- bd_31c871a13a7830fcTexas State AGfiled 2025-10-27(23d gap)Verified by operator
- bd_3954de5decc55d14Indiana State AGfiled 2025-10-24(26d gap)Verified
- bd_686937ac8f09c1a7Maine State AGfiled 2025-10-24(26d gap)Candidate
- bd_9cf4ddaaeb5ee73eVermont State AGfiled 2025-10-24(26d gap)Verified
Showing first 10 of 11 linked disclosures.
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/1094b64d-382d-4d28-a6c5-13d5b672130c.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 19, 2025
- Raw hash
- 3b6f46ef840d45c805aedcc2c5aa4a87a19f722733ce1e0ffefed8f2225529af
Reporting entity
- Name
- Mehri & Skalet, PLLCnorm: mehri skalet
- Domain
- findjustice.com
- Industry
- Legal Services
Victim entity
- Name
- Mehri & Skalet, PLLCnorm: mehri skalet
- Domain
- findjustice.com
- Industry
- Legal Services
- Industry
- Professional Servicesllm
Incident
- Discovered
- May 20, 2025
- Materiality determined
- —
- Notification sent
- Oct 24, 2025
- Affected individuals
- 107
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
Compliance
- Time to disclose
- 26 weeks(183 days from discovery to filing)
- Compliance flags
- ME AG >90d · 183dME resident >60d · 157d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 20, 2025→ Filed with AG: Nov 19, 2025183d 90 days ME AG >90d Maine Discovered: May 20, 2025→ Notified: Oct 24, 2025157d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.