HackingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPIIMediumContained
McCormick Taylor, Inc.
bd_b4cbe9433b0a1c70 · schema v1 · pii pii-v1
Full breach record for McCormick Taylor, Inc. →McCormick Taylor, Inc. notified Maryland AG of unauthorized access to employee files between Dec 16-27, 2024. 77 Maryland residents affected. Data included names, SSNs, driver's licenses, and health info. Credit monitoring offered for 24 months.
Maryland clock⏱ MD AG >30d12 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
A leak claim by qilin about this victim predates this filing by 79 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_c97dafc1f69b689eLeak Siteqilinfiled 2024-12-29(79d gap)Candidate
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376568.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 18, 2025
- Raw hash
- 97ec32b888c12c694c202debf3be349cfd802f566138eb772d45c3591f837444
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- McCormick Taylor, Inc.norm: mccormick taylor
- Domain
- mccormicktaylor.com
Incident
- Discovered
- Dec 25, 2024
- Materiality determined
- —
- Notification sent
- Mar 18, 2025
- Affected individuals
- 77
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Providing written notice of this incident to relevant state regulators
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 12 weeks(83 days from discovery to filing)
- Compliance flags
- MD AG >30dLeak >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.