HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedPIIMediumContained

Sterling Seacrest Pritchard, Inc.

bd_ba9145ecccf11312 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 19, 2025

Filed

May 21, 2026

To disclose

14 months

Affected · nationwide

8,65121 in this filing

Linked

9 filings

Confidence

66%

Full breach record for Sterling Seacrest Pritchard, Inc. →2 incidents on file

Sterling Seacrest Pritchard, Inc. reported an external system breach (hacking) occurring August 12-13, 2025, discovered March 19, 2025. The incident affected 8,651 individuals, including 21 Maine residents. The firm notified consumers in writing on May 19, 2026, and provided 12 months of credit monitoring and identity theft restoration services through Kroll.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Mar 19, 2025 → Filed with AG May 21, 2026428d ✗ ME AG >90d14 months discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

Aug 12, 2025

Begins

May 21, 2026

Filed

vs. sector median

+43 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

New Hampshire State AGbd_61b6c7f9d335b96b2026-05-19 · +2dVerified
New Hampshire State AGbd_5d155bf5e75159b12026-06-17 · +27dVerified
Massachusetts State AGbd_87135406b36acea62026-03-27 · +55dVerified
Maine State AGbd_873454c1e8281ea32026-03-27 · +55dVerified

Show 4 more filings ↓up to 57d gap

New Hampshire State AGbd_a2bac98dc6f5e9452026-03-27 · +55dCandidate
Indiana State AGbd_3be48f35f380de722026-03-25 · +57dCandidate
Nebraska State AGbd_c0fe11bd5f27477f2026-03-25 · +57dVerified
Indiana State AGbd_d3c3d7329b9674722026-03-25 · +57dCandidate

Name: Sterling Seacrest Pritchard, Inc.
norm: sterling seacrest pritchard

Name: Sterling Seacrest Pritchard, Inc.
norm: sterling seacrest pritchard
Industry: Professional Servicesllm

Discovered: Mar 19, 2025
Breach occurred: Aug 12, 2025 – Aug 13, 2025
Materiality determined: —
Notification sent: May 19, 2026
Affected individuals: 8,651state + nationwide
Data types: PII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Filed data breach notice with Maine Attorney General
Initial access: exploit_public_facing

During the incident: Sent written notification to affected consumers
Offered 12 months of Credit Monitoring, Fraud Consultation, and Identity Theft Restoration through Kroll
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 months(428 days from discovery to filing)
Compliance flags: ME AG >90d · 428dME resident >180d · 426d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Mar 19, 2025
→ Filed with AG: May 21, 2026
428d 90 days ME AG >90d
Maine
Discovered: Mar 19, 2025
→ Notified: May 19, 2026
426d 180 days ME resident >180d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Mar 19, 2025 → Filed with AG: May 21, 2026	428d	90 days	ME AG >90d
Maine	Discovered: Mar 19, 2025 → Notified: May 19, 2026	426d	180 days	ME resident >180d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 5 states

View merged incident ↗

Indiana State AGMar 25 · first

Nebraska State AGMar 25 · first

Indiana State AGMar 25 · first

Massachusetts State AG+2d

Maine State AG+2d

New Hampshire State AG+2d

New Hampshire State AG+55d

Maine State AG+57d · this page

New Hampshire State AG+84d

Pattern: first filing Mar 25 (IN), last Jun 17 (NH) — a 84-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b719da6b-e848-4e2c-981b-0af9a7886c24.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 21, 2026
Raw hash: c098c3708217bcfabc908fcfc5461d3d99b3df8b511c0a5df13d3a6ef8dd6591

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entitySterling Seacrest Pritchard, Inc.

Victim entitySterling Seacrest Pritchard, Inc.

Incidentdiscovered Mar 19, 2025

Stated responseSent written notification to affected consumers

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov