Clustered 2 filings across 2 jurisdictions · filed Sep 19, 2023. View entity profile → Other incidents for this victim →
incident inc_5b0a2aabaff44d0e · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
Identity (basic)
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
CA ME
all State AG
Earliest sighting first · deep chronology in Litigation Timeline
Apr 19, 2023 → May 1, 2023
When the intrusion reportedly occurred, per the linked filings
May 1, 2023
Reported by CALIFORNIA AG filing
Aug 2, 2023
Reported by MAINE AG filing
Grant Thornton LLP reported that an unauthorized third party gained access to an employee's email account between April 19, 2023, and May 1, 2023. The incident was discovered on May 1, 2023. Affected data included names and other personal information. Grant Thornton engaged a forensic firm, implemented additional technical controls, and offered one year of identity monitoring services via Kroll.
Grant Thornton LLP reported an external system breach (hacking) occurring on April 19, 2023, discovered on August 2, 2023. The incident affected 6,242 individuals, including 135 Maine residents. Personal information acquired included names and Social Security Numbers. Grant Thornton provided written notification and offered one year of credit monitoring services through Kroll.
Affected (this filing): 6,242
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.