Clustered 12 filings across 8 jurisdictions · filing window Oct 24, 2025 → Nov 21, 2025. View entity profile → Other incidents for this victim →
incident inc_b6ef8ee7e6634cb7 · merge_method human · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
PII
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
CA IN ME MT NH TX VT WA
all State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
12 filings across 8 jurisdictions · Oct 24, 2025 – Nov 21, 2025 · 3 milestones
Dec 17, 2024
When the intrusion reportedly occurred, per the linked filings
May 20, 2025
Reported by VERMONT AG, NEW HAMPSHIRE AG, MAINE AG, CALIFORNIA AG, WASHINGTON AG filings
Sep 25, 2025
Reported by TEXAS AG filings
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Mehri & Skalet, PLLC reported a data breach to the Indiana Attorney General. The breach occurred on 2024-12-17 and was reported on 2025-10-24. 446 Indiana residents were affected.
Affected (this filing): 446
Mehri & Skalet, PLLC (a Washington, DC law firm) reported that an unauthorized actor gained access to an employee's email account on December 17, 2024, downloading information contained therein. Suspicious activity was identified on May 20, 2025, with the investigation confirming unauthorized access. 9 Maine residents were affected. Affected data included names and additional personal identifiers. IDX identity protection and credit monitoring (12 months) was offered.
Affected (this filing): 9
Mehri & Skalet, PLLC notified consumers of a cybersecurity incident where an unauthorized actor accessed an employee's email account on December 17, 2024, following suspicious activity identified on May 20, 2025. The actor downloaded information including names and variable data elements. The firm reported the incident to law enforcement, secured its email tenant, and is offering complimentary identity protection and credit monitoring services to affected individuals.
Mehri & Skalet PLLC notified the NH AG of a data event affecting 35 NH residents. Unauthorized access to an employee email account occurred on Dec 17, 2024, discovered May 20, 2025. Data included names, SSNs, and financial info. Notifications began July 14, 2025. Law enforcement notified; credit monitoring offered.
Affected (this filing): 35
Mehri & Skalet, PLLC based in Washington, DC, District of Columbia, a other entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-09-25 and reported on 2025-10-27. 505 Texas residents were affected. 10,328 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information;Financial Information (e.g. account number, credit or debit card number);Medical Information;Health Insurance Information. Consumers were notified via U.S. Mail.
Affected (this filing): 505
Mehri & Skalet PLLC, a law firm, reported a data event to the New Hampshire Attorney General on November 19, 2025. An unauthorized actor gained access to an employee's email account and downloaded information on December 17, 2024. Suspicious activity was identified on May 20, 2025. The incident involved the name and Social Security number of 125 New Hampshire residents. The firm notified law enforcement, offered 12 months of credit monitoring, and implemented additional employee safeguards.
Affected (this filing): 125
Mehri & Skalet, PLLC notified the California AG of an incident where an unauthorized actor accessed an employee's email account on December 17, 2024, and downloaded information. The firm identified suspicious activity on May 20, 2025, secured the email tenant, and launched an investigation. The breach involved names and other data elements. The firm reported the incident to law enforcement and is offering identity protection services to affected individuals in multiple states.
Mehri & Skalet, PLLC, a Washington DC law firm, discovered on May 20, 2025 that an unauthorized actor had accessed an employee email account and downloaded information on December 17, 2024. The firm secured its email tenant, launched an investigation, and notified 107 Maine residents. Affected individuals were offered 12 months of IDX identity protection and credit monitoring services.
Affected (this filing): 107
Mehri & Skalet PLLC reported a data breach to the Montana Attorney General. The breach was reported on 2025-11-19. The breach occurred from 12/17/2024 to 05/20/2025. 69 Montana residents were affected.
Affected (this filing): 69
Mehri & Skalet, PLLC, a business sector entity reported a phishing incident to the Washington Attorney General. The organization became aware of the incident on 2025-05-20 and filed notice on 2025-11-19. 518 Washington residents were affected. 183 days elapsed between awareness and notification. 154 days to identify the breach. 0 days to contain the breach.
Affected (this filing): 518
Mehri & Skalet, PLLC notified consumers of a data breach where an unauthorized actor accessed an employee's email account on December 17, 2024, downloading names and other personal information. The firm reported the incident to law enforcement and is offering complimentary identity protection and credit monitoring services to affected individuals.
Mehri & Skalet, PLLC based in Washington, District of Columbia, a other entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-09-25 and reported on 2025-11-21. 3,210 Texas residents were affected. 36,011 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information;Financial Information (e.g. account number, credit or debit card number);Medical Information;Health Insurance Information. Consumers were notified via U.S. Mail.
Affected (this filing): 3,210