HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)LowContained

Magavern Magavern Grimm LLP

bd_ff61065d315c1c4b · schema v1 · pii pii-v1

Severity

Low

Discovered

Dec 2, 2022

Filed

Jun 20, 2023

To disclose

29 weeks

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for Magavern Magavern Grimm LLP →

Magavern Magavern Grimm LLP notified the NH Attorney General of unauthorized access to an email account detected on Dec 2, 2022. One NH resident was affected. The firm engaged cybersecurity experts and is offering credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 29 weeks / 200 days

Dec 2, 2022

Discovered

May 25, 2023

Scope determined

Jun 20, 2023

Filed

vs. sector median

+10 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Maine State AGbd_3196244d64087bb92023-06-20Candidate
Massachusetts State AGbd_55a2907d0109e5812023-06-20Verified

Name: Magavern Magavern Grimm LLP
norm: magavern magavern grimm
Domain: magavern.com
Industry: Legal Services

Name: Magavern Magavern Grimm LLP
norm: magavern magavern grimm
Domain: magavern.com
Industry: Legal Services
Industry: Professional Servicesllm

Discovered: Dec 2, 2022
Materiality determined: May 25, 2023
Notification sent: Jun 20, 2023
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Attorney General John Formella
Initial access: valid_credentials

During the incident: Took steps to secure the account
Engaged independent cybersecurity experts to conduct an investigation
Undertook a review of the potentially affected data
Offering complimentary credit and identity protection monitoring
Changes made: Implementing additional security measures
Implementing additional technical security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 weeks(200 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Maine State AGJun 20 · first

Massachusetts State AGJun 20 · first

New Hampshire State AGJun 20 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/magavern-magavern-grimm-20230620.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 20, 2023
Raw hash: 46a17731ec40d443fb686d5ce81e74a37ca85c05910314171a123dc645d6c234

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityMagavern Magavern Grimm LLP

Victim entityMagavern Magavern Grimm LLP

Incidentdiscovered Dec 2, 2022

Stated responseTook steps to secure the account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov