HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedPIIIdentity (basic)MinorHighContained

Charlie Condon Law Firm, LLC

bd_e493b4c1e016f09c · schema v1 · pii pii-v1

Severity

High

Discovered

Oct 6, 2025

Filed

May 15, 2026

To disclose

32 weeks

Affected

2,320state residents only

Linked

5 filings

Confidence

64%

Full breach record for Charlie Condon Law Firm, LLC →

Charlie Condon Law Firm, LLC disclosed a data security incident discovered on October 6, 2025, involving unauthorized access to files containing client and employee personal information. The firm engaged cybersecurity experts, secured its network, and offered credit monitoring services. Notices were sent on May 8, 2026.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due32 weeks discovery → filing

Incident timeline

discovery → filing · 32 weeks / 221 days

Oct 6, 2025

Discovered

May 15, 2026

Filed

vs. sector median

+14 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

New Hampshire State AGbd_38760c1950e1f85c2026-05-15Verified
Maine State AGbd_1737eb6462aa847e2026-05-09 · +6dVerified by operator
Massachusetts State AGbd_78981195c0e055d52026-05-09 · +6dCandidate
Indiana State AGbd_2aaa95f9d47421122026-05-08 · +7dVerified

Name: Charlie Condon Law Firm, LLC
norm: charlie condon law firm

Name: Charlie Condon Law Firm, LLC
norm: charlie condon law firm
Industry: Professional Servicesllm

Discovered: Oct 6, 2025
Materiality determined: —
Notification sent: May 8, 2026
Affected individuals: 2,320state-resident count only
Data types: PIIIdentity (basic)Minor
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Took steps to secure our network
Initiated an investigation with the assistance of cybersecurity experts
Undertook a comprehensive review of those files
Implemented additional measures to further harden our environment
Offering complimentary credit monitoring and identity protection services through IDX
Changes made: Implemented additional measures to further harden our environment and reduce the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 32 weeks(221 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGMay 8 · first

Maine State AG+1d

Massachusetts State AG+1d

New Hampshire State AG+7d

South Carolina State AG+7d · this page

Pattern: first filing May 8 (IN), last May 15 (SC) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/2026/Consumer%20Letter%20-%20Charlie%20Condon%20Law%20Firm%2C%20LLC.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 15, 2026
Raw hash: d312ce8993c47e457061f64121e9bffe4ffe4d313f401b8d702ba3d7263a8224

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityCharlie Condon Law Firm, LLC

Victim entityCharlie Condon Law Firm, LLC

Incidentdiscovered Oct 6, 2025

Stated responseTook steps to secure our network

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov