HackingProfessional ServicesFinancial ServicesFinanceCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIILowContained
Hallisey & D'Agostino, LLP
bd_f2f9d2090f5cd0f3 · schema v1 · pii pii-v1
Full breach record for Hallisey & D'Agostino, LLP →Hallisey & D'Agostino, LLP, a Connecticut-based tax and accounting firm, experienced an external network breach between September 28 and October 22, 2025. Unusual activity was identified on October 21, 2025. An unknown actor gained unauthorized access and potentially acquired files containing personal information. A comprehensive data review concluded March 19, 2026. 74 Maine residents and 16,683 total individuals were affected. IDX identity protection services (12 months) were offered.
Maine clockDiscovered Oct 21, 2025 → Filed with AG Apr 17, 2026178d ✗ ME AG >90d25 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_647dbf9a138be25bIndiana State AGfiled 2026-04-17Candidate
- bd_6d1636b0677487b4New Hampshire State AGfiled 2026-04-17Verified
- bd_ee948235b7ce7dacVermont State AGfiled 2026-04-18(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/385fc975-ad5f-4530-82f8-93777baa83ed.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 17, 2026
- Raw hash
- 6bb994918d60542a3ace08fc69563a9931de8ed885c64b84f32ce12bffbb781f
Reporting entity
- Name
- Hallisey & D'Agostino, LLPnorm: hallisey d agostino
- Domain
- hdllpcpa.com
- Industry
- Tax and accounting firm
Victim entity
- Name
- Hallisey & D'Agostino, LLPnorm: hallisey d agostino
- Domain
- hdllpcpa.com
- Industry
- Tax and accounting firm
- Industry
- Professional ServicesllmFinancial Servicesllm
Incident
- Discovered
- Oct 21, 2025
- Materiality determined
- Mar 19, 2026
- Notification sent
- Apr 17, 2026
- Affected individuals
- 74
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- FBI notified
Compliance
- Time to disclose
- 25 weeks(178 days from discovery to filing)
- Compliance flags
- ME AG >90d · 178dME resident >60d · 178d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 21, 2025→ Filed with AG: Apr 17, 2026178d 90 days ME AG >90d Maine Discovered: Oct 21, 2025→ Notified: Apr 17, 2026178d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.