HackingCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Rudman & Winchell LLC
bd_df073ceb0924be76 · schema v1 · pii pii-v1
Full breach record for Rudman & Winchell LLC →Rudman & Winchell LLC, a law firm based in Bangor, Maine, reported an external system breach (hacking) occurring on February 3, 2023, discovered on March 7, 2024. The incident affected 11,327 individuals, including 9,129 Maine residents. Acquired data included names and financial account or credit/debit card numbers (with security codes/PINs). The firm notified affected individuals in writing on March 13, 2024, and offered 12 months of credit monitoring, identity theft recovery, and insurance reimbursement.
Leak gap clock✗ Leak >180d6 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed11,327 affectedView incident
A leak claim by black_basta about this victim predates this filing by 361 days.View originating leak claim
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c2a45edb-2261-4fd2-9e0b-6d4e14ea923b.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 13, 2024
- Raw hash
- fb54af68b3fd1c472b0d6df420b3756233b2db09d902533daeb2418f4ae3ddf3
Reporting entity
- Name
- Rudman & Winchell LLCnorm: rudman winchell
- Domain
- rudmanwinchell.com
Victim entity
- Name
- Rudman & Winchell LLCnorm: rudman winchell
- Domain
- rudmanwinchell.com
Incident
- Discovered
- Mar 7, 2024
- Materiality determined
- —
- Notification sent
- Mar 13, 2024
- Affected individuals
- 11,327
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified consumer reporting agencies
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 days(6 days from discovery to filing)
- Compliance flags
- Leak >180dME AG ≤30d · 6d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 7, 2024→ Filed with AG: Mar 13, 20246d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.