HackingData ExfiltratedCustomer Data InvolvedPIIIDENTITY_GOVERNMENTHighContained
Stibbs & Co. P.C.
bd_ed5f1d7a2475d166 · schema v1 · pii pii-v1
Full breach record for Stibbs & Co. P.C. →Stibbs & Co., P.C., a professional services firm based in Texas, reported an external system breach (hacking) occurring on November 15, 2022, discovered on May 15, 2023. The incident compromised names and Social Security Numbers of 8,525 individuals, including 1 Maine resident. The firm notified affected individuals in writing on June 30, 2023, and provided 12 months of credit monitoring and identity restoration services through Experian.
Maine clockDiscovered May 15, 2023 → Filed with AG Jul 12, 202358d ⏱ ME AG >30d8 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 5 about the same incident.View merged incident
A leak claim by alphv about this victim predates this filing by 162 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_c6dd5f8e9d798b71Leak Sitealphvfiled 2023-01-31(162d gap)Verified by operator
Regulatory filings (3) · sorted by filing gap
- bd_0a64a1365d36aba4Montana State AGfiled 2023-07-12Verified by operator
- bd_1620c4fdfa590c5dVermont State AGfiled 2023-07-12Candidate
- bd_26074305ce15a921Vermont State AGfiled 2023-07-12Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c3b2e817-1aee-4230-9269-73f8beee2fa3.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 12, 2023
- Raw hash
- a298d7b83291ee2e744beee796a56dc246a8fb8e108867edac4409ccbf8ed73f
Reporting entity
- Name
- Stibbs & Co. P.C.norm: stibbs
- Domain
- stibbsco.com
- Industry
- professional_services
Victim entity
- Name
- Stibbs & Co. P.C.norm: stibbs
- Domain
- stibbsco.com
- Industry
- professional_services
Incident
- Discovered
- May 15, 2023
- Materiality determined
- —
- Notification sent
- Jun 30, 2023
- Affected individuals
- 8,525
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 8 weeks(58 days from discovery to filing)
- Compliance flags
- ME AG >30d · 58dLeak >90d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 15, 2023→ Filed with AG: Jul 12, 202358d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.