Social EngineeringPhishingCustomer Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Kutchins, Robbins & Diamond
bd_e0ffbd7f12e1e61a · schema v1 · pii pii-v1
Full breach record for Kutchins, Robbins & Diamond →Kutchins, Robbins & Diamond, Ltd. disclosed a data breach affecting 7,154 individuals, including one Maine resident. The breach occurred on May 31, 2023, and was discovered on February 5, 2024. The incident was a result of a phishing attack, which led to the compromise of names and Social Security numbers. The company began notifying affected individuals on February 26, 2024, and offered 12 months of credit and dark web monitoring services through IDX.
Maine clockDiscovered Feb 5, 2024 → Filed with AG Feb 27, 202422d ✓ ME AG ≤30d22 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_2a7902bde3efb967New Hampshire State AGfiled 2024-02-27Verified
- bd_c6934aded61146f7Montana State AGfiled 2024-02-27Candidate
- bd_948d54d56b329e05Indiana State AGfiled 2024-02-26(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/3851f611-368d-4800-b7da-552bf3e2fddf.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 27, 2024
- Raw hash
- 42ce8c298af4ca2ad549c7376a3b71622640d99a7a65a38eeec82b49e6b14627
Reporting entity
- Name
- Kutchins, Robbins & Diamondnorm: kutchins robbins diamond
Victim entity
- Name
- Kutchins, Robbins & Diamondnorm: kutchins robbins diamond
Incident
- Discovered
- Feb 5, 2024
- Materiality determined
- —
- Notification sent
- Feb 26, 2024
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
Compliance
- Time to disclose
- 22 days(22 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 22d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 5, 2024→ Filed with AG: Feb 27, 202422d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.