HackingDelayed DiscoveryPIIIDENTITY_BASICLowContained
Marshall & Melhorn, LLC
bd_fedf4a0256313e98 · schema v1 · pii pii-v1
Full breach record for Marshall & Melhorn, LLC →Marshall & Melhorn, LLC, a law firm, disclosed a cybersecurity incident where an unauthorized actor gained access to its network on September 14, 2021. The breach may have exposed names and other personal data. The firm notified law enforcement, engaged computer specialists, and offered credit monitoring services. The notice was filed with the Vermont Attorney General on June 7, 2023.
Vermont clock✗ VT AG >45 bday21 months discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_25e56e830e87027bHHS OCRfiled 2023-06-07Verified
- bd_a330133bef4180c8Montana State AGfiled 2023-06-07Verified
- bd_c0884ed19903020bNew Hampshire State AGfiled 2023-06-12(5d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-06-07-marshall-melhorn-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 7, 2023
- Raw hash
- 55c61b74c5b7c12c58b5ed1012620f00bfa64d6e409763a7a736102f3774bdbd
Reporting entity
- Name
- Marshall & Melhorn, LLCnorm: marshall melhorn
- Domain
- marshallmelhorn.com
Victim entity
- Name
- Marshall & Melhorn, LLCnorm: marshall melhorn
- Domain
- marshallmelhorn.com
Incident
- Discovered
- Sep 14, 2021
- Materiality determined
- —
- Notification sent
- Jun 7, 2023
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified law enforcement and cooperated in their investigation
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 21 months(631 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.