🦬Montana State AGlinked via same-victim cross-source · 100%
Clustered 4 filings across 4 jurisdictions · filing window Dec 13, 2024 → Dec 18, 2024. View entity profile → Other incidents for this victim →
incident inc_51cfa2ba53fa44ef · merge_method human · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
PII
FEDERAL ME MT NH
HHS OCR · State AG
Earliest sighting first · deep chronology in Litigation Timeline
Oct 31, 2024
When the intrusion reportedly occurred, per the linked filings
Oct 31, 2024
Reported by MAINE AG, HHS OCR filings
Ott Cone & Redpath, P.A., a North Carolina law firm acting as a HIPAA business associate, reported to HHS OCR on 2024-12-18 that an email phishing attack against employees compromised the PHI of 22,171 individuals. Affected data included names, addresses, dates of birth, Social Security numbers, claims and financial information, diagnoses, conditions, and other treatment information. The firm notified HHS, affected individuals, and the media; posted substitute notice; and remediated by adopting encryption, strengthening policies, and adding technical safeguards.
Affected (this filing):
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Ott Cone & Redpath, P.A. reported a data breach to the Montana Attorney General. The breach was reported on 2024-12-13. The breach occurred on 10/31/2024. 2 Montana residents were affected.
Affected (this filing): 2
Ott Cone & Redpath, P.A., a law firm based in Greensboro, NC, experienced an external system breach (hacking) on June 3–4, 2024. The breach was discovered on October 31, 2024, approximately five months after it occurred. A total of 12,286 individuals were affected nationwide, including 9 Maine residents. Affected individuals were notified in writing on December 13, 2024. IDX was engaged to provide 12 months of ID restoration and credit monitoring services.
Affected (this filing): 9
State AG filing for Ott Cone & Redpath, P.A. submitted on 2024-12-16. The attachment content is empty; no breach details, dates, or data types could be extracted.