HackingProfessional ServicesProfessional ServicesVulnerability ExploitTargetedIdentity (basic)Government IDHighContained

Phillip V. Keenan P.C.

bd_ee20cd034064ec64 · schema v1 · pii pii-v1

Severity

High

Discovered

Dec 17, 2024

Filed

Jan 27, 2025

To disclose

6 weeks

Affected · nationwide

4,8632 in this filing

Linked

5 filings

Confidence

64%

Full breach record for Phillip V. Keenan P.C. →2 incidents on file

Phillip V. Keenan P.C. dba Ambler Keenan Mitchell Johnson reported an external system breach (hacking) occurring on October 9, 2024, discovered on December 17, 2024. The incident affected 4,863 individuals, including 2 Maine residents. Data types included names and government identifiers. Written notifications were sent on January 24, 2025.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Dec 17, 2024 → Filed with AG Jan 27, 202541d ⏱ ME AG >30d6 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 69 days

discovery → filing · 6 weeks / 41 days

Oct 9, 2024

Begins

Dec 17, 2024

Discovered

Jan 27, 2025

Filed

vs. sector median

13 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_00d63e9dfe8a32202025-01-27Verified
Indiana State AGbd_329df198c7465cc52025-01-24 · +3dVerified
Vermont State AGbd_9cd30cc04b5d86ac2025-01-24 · +3dVerified
Nebraska State AGbd_a1a94f93f8fa32012025-01-24 · +3dVerified

Name: Phillip V. Keenan P.C.
norm: phillip v keenan

Name: Phillip V. Keenan P.C.
norm: phillip v keenan
Also named: Phillip V. Keenan P.C.dba oflegal entity
Ambler Keenan Mitchell Johnsondba oftrade name
Industry: Professional Servicesllm

Discovered: Dec 17, 2024
Breach occurred: Oct 9, 2024
Undetected for: 69 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 24, 2025
Affected individuals: 4,863state + nationwide
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Filed notice with Maine Attorney General
Initial access: exploit_public_facing

During the incident: Worked with IT company to keep software up to date
Maintained high level of security
Protected computer systems
Changes made: Worked with IT company to keep software up to date
Maintained high level of security
Protected computer systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(41 days from discovery to filing)
Compliance flags: ME AG >30d · 41d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Dec 17, 2024
→ Filed with AG: Jan 27, 2025
41d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Dec 17, 2024 → Filed with AG: Jan 27, 2025	41d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGJan 24 · first

Vermont State AGJan 24 · first

Nebraska State AGJan 24 · first

Massachusetts State AG+3d

Maine State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/6b96b7c5-b278-4a56-a84b-e0bf4e2ca8fa.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 27, 2025
Raw hash: 0dfa37253d120c5481bb97ea005514458136d6c7b24de11fae8ebb8a1172f0dc

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityPhillip V. Keenan P.C.

Victim entityPhillip V. Keenan P.C.

Incidentdiscovered Dec 17, 2024

Stated responseWorked with IT company to keep software up to date

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov