HackingProfessional ServicesProfessional ServicesData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumContained
McElroy, Deutsch, Mulvaney & Carpenter LLP
bd_efd18d3b3c3e0536 · schema v1 · pii pii-v1
Full breach record for McElroy, Deutsch, Mulvaney & Carpenter LLP →McElroy, Deutsch, Mulvaney & Carpenter LLP (MDMC), a New Jersey-based law firm, experienced an external cyberattack between March 28–April 1, 2025, discovered on April 3, 2025. Unauthorized actors accessed or acquired files containing names and Social Security numbers. The comprehensive file review was completed December 4, 2025, identifying 3 Maine residents affected. MDMC secured its network, notified federal law enforcement, and offered 12 months of credit monitoring via Epiq.
Maine clockDiscovered Apr 3, 2025 → Filed with AG Dec 19, 2025260d ✗ ME AG >90d37 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_698f1a0d02962016Indiana State AGfiled 2025-12-19Verified
- bd_bd3f74df05a359e3New Hampshire State AGfiled 2025-12-19Verified
- bd_03b000a29a602b0cNew Hampshire State AGfiled 2026-03-12(83d gap)Candidate
- bd_df428c93170c98cfMaine State AGfiled 2026-03-12(83d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/7f0dc522-98c3-4df9-bd4f-65b45398da43.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 19, 2025
- Raw hash
- 88bdc8106571fcc4e64d915f2536a4304074572b209004561a66356ed580afd1
Reporting entity
- Name
- McElroy, Deutsch, Mulvaney & Carpenter LLPnorm: mcelroy deutsch mulvaney carpenter
- Domain
- mdmc-law.com
- Industry
- Legal Services
Victim entity
- Name
- McElroy, Deutsch, Mulvaney & Carpenter LLPnorm: mcelroy deutsch mulvaney carpenter
- Domain
- mdmc-law.com
- Industry
- Legal Services
- Industry
- Professional Servicesllm
Incident
- Discovered
- Apr 3, 2025
- Materiality determined
- —
- Notification sent
- Dec 19, 2025
- Affected individuals
- 3
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified federal law enforcementNotified relevant state regulatorsNotified three major credit reporting agencies (Equifax, Experian, TransUnion)
Compliance
- Time to disclose
- 37 weeks(260 days from discovery to filing)
- Compliance flags
- ME AG >90d · 260dME resident >180d · 260d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 3, 2025→ Filed with AG: Dec 19, 2025260d 90 days ME AG >90d Maine Discovered: Apr 3, 2025→ Notified: Dec 19, 2025260d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.