DisclosureLens
UnknownProfessional ServicesProfessional ServicesCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Cutcliffe Archetto & Santilli

bd_d1134e6e232556ab · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 22, 2025

Filed

Oct 15, 2025

To disclose

21 weeks

Affected

Not disclosed

Linked

7 filings

Confidence

69%
Full breach record for Cutcliffe Archetto & Santilli

Cutcliffe Archetto & Santilli, a Rhode Island legal services firm, notified consumers of a cybersecurity incident discovered on May 22, 2025. The incident potentially exposed the names, addresses, dates of birth, and Social Security Numbers of approximately 576 Rhode Island residents. The firm secured its network, notified law enforcement, and engaged forensic investigators. No evidence of misuse was found. Affected individuals are offered 12 months of credit monitoring and fraud assistance.

Vermont clock VT AG >45 bday21 weeks discovery → filing

Incident timeline

discovery → filing · 21 weeks / 146 days

May 22, 2025

Discovered

Oct 15, 2025

Filed

vs. sector median

+2 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (2)

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 4 states

View merged incident ↗
Maine State AGOct 15 · first
Vermont State AGOct 15 · first · this page

Pattern: first filing Oct 15 (ME), last Dec 19 (MA) — a 65-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.