HackingStolen CredentialsCustomer Data InvolvedPIIIDENTITY_BASICHEALTH_BASICLowContained
Rogin Nassau LLC
bd_0068ac122bd72da2 · schema v1 · pii pii-v1
Full breach record for Rogin Nassau LLC →Rogin Nassau, LLC reported that an unauthorized individual accessed two email accounts between May 23 and June 1, 2022. The breach exposed personal information, including potential medical data, of an unspecified number of individuals. The firm secured the accounts, engaged outside cybersecurity professionals, and offered one year of identity monitoring services via Kroll. Two Rhode Island residents were explicitly identified as impacted.
Vermont clock⏱ VT AG >14 bday5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_bfc28864c7e5b267New Hampshire State AGfiled 2023-02-13(4d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-02-09-rogin-nassau-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 9, 2023
- Raw hash
- 0e8198dd70811b21e12f93f8e010a6b7f4aab1f9a8e877e9ff871a345a50637b
Reporting entity
- Name
- Rogin Nassau LLCnorm: rogin nassau
Victim entity
- Name
- Rogin Nassau LLCnorm: rogin nassau
Incident
- Discovered
- Jan 6, 2023
- Materiality determined
- —
- Notification sent
- Feb 9, 2023
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 5 weeks(34 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.