HackingCapture Stored DataData ExfiltratedCustomer Data InvolvedPIIIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Riddle & Butts, LLP
bd_e051698dcb32ee0f · schema v1 · pii pii-v1
Full breach record for Riddle & Butts, LLP →Riddle & Butts LLP (Spring, TX) suffered an external network breach from Dec 30, 2025 to Jan 7, 2026. An unauthorized actor copied files containing names, SSNs, and driver's license numbers. Discovered Jan 7, 2026; review completed Feb 12, 2026. 6,673 total affected; 1 Maine resident. Federal law enforcement notified. 24-month Experian credit monitoring offered.
Maine clockDiscovered Jan 7, 2026 → Filed with AG Mar 10, 202662d ⏱ ME AG >30d9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_f24cf2933591a89fIndiana State AGfiled 2026-03-10Verified
- bd_fe4d83dfbff627bfIndiana State AGfiled 2026-03-10Verified
- bd_674f2dd5cb9770baTexas State AGfiled 2026-03-12(2d gap)Verified
- bd_75b9543e653360b6New Hampshire State AGfiled 2026-06-02(84d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 84d gap
- bd_fd12b99434464c73Texas State AGfiled 2026-06-02(84d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/4ef9d2e4-7ded-4352-b03c-155aa107eb0e.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 10, 2026
- Raw hash
- 69325bd1018327c06687e5d1b5645eb44f9cd7ec0f676c489928a17680c373dd
Reporting entity
- Name
- Riddle & Butts, LLPnorm: riddle butts
- Domain
- riddlebutts.com
- Industry
- Other Commercial
Victim entity
- Name
- Riddle & Butts, LLPnorm: riddle butts
- Domain
- riddlebutts.com
- Industry
- Other Commercial
Incident
- Discovered
- Jan 7, 2026
- Materiality determined
- Feb 12, 2026
- Notification sent
- Mar 10, 2026
- Affected individuals
- 1
- Data types
- PIIIDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- federal law enforcement notified
Compliance
- Time to disclose
- 9 weeks(62 days from discovery to filing)
- Compliance flags
- ME AG >30d · 62dME resident >60d · 62d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 7, 2026→ Filed with AG: Mar 10, 202662d 30 days (soft) ME AG >30d Maine Discovered: Jan 7, 2026→ Notified: Mar 10, 202662d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.