HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedPIIGovernment IDHigh

Bousquet Holstein PLLC

bd_c243ce49814f3564 · schema v1 · pii pii-v1

Severity

High

Discovered

Sep 27, 2023

Filed

Apr 29, 2024

To disclose

31 weeks

Affected · nationwide

12,69020 in this filing

Linked

6 filings

Confidence

75%

Full breach record for Bousquet Holstein PLLC →2 incidents on file

Bousquet Holstein PLLC, a professional services firm, reported an external system breach that was discovered on September 27, 2023. The incident, which began on September 25, 2023, affected 20 Maine residents, compromising their names and Social Security numbers. The company provided written notification to the affected individuals on April 29, 2024, and offered 24 months of complimentary credit monitoring services.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Sep 27, 2023 → Filed with AG Apr 29, 2024215d ✗ ME AG >90d31 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 2 days

discovery → filing · 31 weeks / 215 days

Sep 25, 2023

Begins

Sep 27, 2023

Discovered

Apr 29, 2024

Filed

vs. sector median

+13 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Montana State AGbd_1b3adac6ec3e11e02024-04-29Candidate
Massachusetts State AGbd_536837461e7f11de2024-04-29Verified
Vermont State AGbd_684950ca7aa003532024-04-29Verified
Indiana State AGbd_e391a3f7a4d01e332024-04-29Verified

Show 1 more filing ↓

New Hampshire State AGbd_ef36e2c3e73bfdee2024-04-29Verified

Name: Bousquet Holstein PLLC
norm: bousquet holstein
Domain: bhlawpllc.com

Name: Bousquet Holstein PLLC
norm: bousquet holstein
Domain: bhlawpllc.com
Industry: Professional Servicesllm

Discovered: Sep 27, 2023
Breach occurred: Sep 25, 2023
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 29, 2024
Affected individuals: 12,690state + nationwide
Data types: PIIGovernment ID
Data elements: Social Security number
Attack vector: Unauthorized Access

Changes made: Complimentary credit monitoring services for 24 months through Cyberscout, a TransUnion company.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 31 weeks(215 days from discovery to filing)
Compliance flags: ME AG >90d · 215dME resident >60d · 215d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Sep 27, 2023
→ Filed with AG: Apr 29, 2024
215d 90 days ME AG >90d
Maine
Discovered: Sep 27, 2023
→ Notified: Apr 29, 2024
215d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Sep 27, 2023 → Filed with AG: Apr 29, 2024	215d	90 days	ME AG >90d
Maine	Discovered: Sep 27, 2023 → Notified: Apr 29, 2024	215d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Montana State AGApr 29 · first

Massachusetts State AGApr 29 · first

Vermont State AGApr 29 · first

Indiana State AGApr 29 · first

New Hampshire State AGApr 29 · first

Maine State AGApr 29 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ad0097c2-f7c4-42cd-80f0-1956431b0a5e.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 29, 2024
Raw hash: 22ba47888abf444e1e9720fd8447045d83f0d3f47417be7d4a6dc3bc5d6c7025

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityBousquet Holstein PLLC

Victim entityBousquet Holstein PLLC

Incidentdiscovered Sep 27, 2023

Stated responseComplimentary credit monitoring services for 24 months through Cyberscout, a TransUnion company.

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov