MalwareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedRansom DemandedPIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPHIHighActive
McCoyd, Parkas & Ronan LLP
bd_cce5eea352ac1fb0 · schema v1 · pii pii-v1
Full breach record for McCoyd, Parkas & Ronan LLP →McCoyd, Parkas & Ronan LLP reported a ransomware attack occurring between May 13-14, 2026, discovered on May 14, 2026. The breach affected 1,240 individuals, including 4 Maine residents. The firm notified the FBI, retained outside counsel, and offered 12 months of Experian IdentityWorks. The investigation is ongoing.
Maine clockDiscovered May 14, 2026 → Filed with AG Jun 10, 202627d ✓ ME AG ≤30d27 days discovery → filing
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_39460e0cb0dc2731Vermont State AGfiled 2026-06-10Verified
- bd_479589b579b9b8bdNew Hampshire State AGfiled 2026-06-10Verified
- bd_d2c0c089284c2b91Indiana State AGfiled 2026-06-11(1d gap)Verified
- bd_7eefc74e99acbd31Massachusetts State AGfiled 2026-06-01(9d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b794210c-b1ed-4f96-91fe-0f97562d188c.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 10, 2026
- Raw hash
- 78644a180a667f06523c13bb33dda2d0133b215e4d164fae44e99d4a2c32dc5e
Reporting entity
- Name
- McCoyd, Parkas & Ronan LLPnorm: mccoyd parkas ronan
Victim entity
- Name
- McCoyd, Parkas & Ronan LLPnorm: mccoyd parkas ronan
Incident
- Discovered
- May 14, 2026
- Materiality determined
- —
- Notification sent
- Jun 11, 2026
- Affected individuals
- 1,240
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPHI
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Regulator citations
- Notifying state regulators
Compliance
- Time to disclose
- 27 days(27 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 27d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 14, 2026→ Filed with AG: Jun 10, 202627d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.