HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Daniel A. Eckman, PC
bd_fc10b9450b05496f · schema v1 · pii pii-v1
Full breach record for Daniel A. Eckman, PC →Daniel A. Eckman, PC notified Maryland AG of an unauthorized access incident on Dec 25, 2024. An actor accessed the firm's server and copied files containing names, SSNs, DOBs, driver's license numbers, signatures, and financial account info. One Maryland resident was affected. The firm secured its environment, engaged in investigation, and provided 2 years of Experian credit monitoring to the affected individual.
Maryland clock⏱ MD AG >30d7 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_0991fc1f00850f8cWashington State AGfiled 2025-02-18(4d gap)Candidate
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376360.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 14, 2025
- Raw hash
- 7d18333944c1594679a82ca1d7279da8b60c695a9e648ad7b1eb82e8ab7af9c5
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- Daniel A. Eckman, PCnorm: daniel a eckman
Incident
- Discovered
- Dec 25, 2024
- Materiality determined
- —
- Notification sent
- Feb 14, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Maryland Office of the Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 7 weeks(51 days from discovery to filing)
- Compliance flags
- MD AG >30d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.