HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTMediumResolved
Jenkins Fenstermaker, PLLC
bd_fd17709ec719a025 · schema v1 · pii pii-v1
Full breach record for Jenkins Fenstermaker, PLLC →Jenkins Fenstermaker, PLLC, a law firm in Huntington, WV, experienced unauthorized access to certain files in its computer network between April 5 and April 9, 2025. The incident was discovered on April 9, 2025. A review of the involved files, completed on September 26, 2025, identified one Maine resident whose name and Social Security number were exposed. Affected individual was notified by mail on December 19, 2025. CyberScout credit monitoring was offered.
Maine clockDiscovered Apr 9, 2025 → Filed with AG Dec 19, 2025254d ✗ ME AG >90d36 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_a90b42d20765a002Indiana State AGfiled 2025-12-19Verified
- bd_fb4aa3dfca7db0c4New Hampshire State AGfiled 2025-12-19Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f68db750-ba51-4fb5-96f8-3d568ce99d64.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 19, 2025
- Raw hash
- 03f63af247f52421f93537cc037bb20d2b0d293118265ffb0ba293ed3ff0c7c7
Reporting entity
- Name
- Jenkins Fenstermaker, PLLCnorm: jenkins fenstermaker
- Industry
- Other Commercial
Victim entity
- Name
- Jenkins Fenstermaker, PLLCnorm: jenkins fenstermaker
- Industry
- Other Commercial
- Industry
- Professional Servicesllm
Incident
- Discovered
- Apr 9, 2025
- Materiality determined
- Sep 26, 2025
- Notification sent
- Dec 19, 2025
- Affected individuals
- 1
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 36 weeks(254 days from discovery to filing)
- Compliance flags
- ME AG >90d · 254dME resident >180d · 254d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 9, 2025→ Filed with AG: Dec 19, 2025254d 90 days ME AG >90d Maine Discovered: Apr 9, 2025→ Notified: Dec 19, 2025254d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.