DisclosureLens
HackingFinancial accountFinancial credentialsMediumContained

Hannis T. Bourgeois, LLP

bd_fb62b26d01f877dc · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 28, 2021

Filed

Aug 12, 2021

To disclose

11 weeks

Affected · nationwide

18,1478 in this filing

Linked

5 filings

Confidence

50%
Full breach record for Hannis T. Bourgeois, LLP

On January 8, 2021, the accounting firm Hannis T. Bourgeois, LLP was the victim of an external system breach, discovered on May 28, 2021, which compromised the financial account numbers or credit/debit card numbers of 18,147 individuals, including 8 Maine residents.

Maine clockDiscovered May 28, 2021Filed with AG Aug 12, 202176d ME AG >30d11 weeks discovery → filing
AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 140 days
discovery → filing · 11 weeks / 76 days

Jan 8, 2021

Begins

May 28, 2021

Discovered

Aug 12, 2021

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Montana State AGAug 4 · first
Maine State AG+8d · this page

Pattern: first filing Aug 4 (MT), last Aug 12 (ME) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.