Waters & Kraus, LLP
bd_c907af0451e3804d · schema v1 · pii pii-v1
Full breach record for Waters & Kraus, LLP →Waters & Kraus LLP, a professional services firm based in Dallas, TX, reported an external system breach (hacking) occurring between December 5, 2019, and May 15, 2020. The incident was discovered on May 14, 2020. The breach compromised personal information, including names, government identifiers, and financial account numbers (credit/debit card numbers with security codes/PINs). A total of 14,450 individuals were affected, including 42 Maine residents. Notification was sent on January 13, 2021, offering one year of credit monitoring and identity theft protection services via Experian.
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/59ec35d6-cf37-4a27-bf9e-5d95d346b9e3.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 13, 2021
- Raw hash
- 5c4eb0dff7884d079dabe8ed1da58a1fae4f297028e9c7d6f980fce4fc7ed452
Reporting entity
- Name
- Waters & Kraus, LLPnorm: waters kraus
Victim entity
- Name
- Waters & Kraus, LLPnorm: waters kraus
Incident
- Discovered
- May 14, 2020
- Materiality determined
- —
- Notification sent
- Jan 13, 2021
- Affected individuals
- 14,450
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 35 weeks(244 days from discovery to filing)
- Compliance flags
- ME AG >90d · 244dME resident >180d · 244d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 14, 2020→ Filed with AG: Jan 13, 2021244d 90 days ME AG >90d Maine Discovered: May 14, 2020→ Notified: Jan 13, 2021244d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.