HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedGovernment IDIdentity (basic)MediumContained

Marans Newman Tsolis & Nazinitsky LLC

bd_027649c6c75e1bc8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 14, 2021

Filed

May 12, 2022

To disclose

34 weeks

Affected

4state residents only

Linked

5 filings

Confidence

67%

Full breach record for Marans Newman Tsolis & Nazinitsky LLC →

Marans Newman Tsolis & Nazinitsky LLC, a New York-based law firm, notified the New Hampshire Attorney General of a data security incident affecting 4 New Hampshire residents. The firm detected unauthorized access to systems on September 14, 2021, which may have exposed names and Social Security numbers. The firm engaged forensic experts, notified the FBI, and provided 4 residents with complimentary identity monitoring services.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d34 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 34 weeks / 240 days

Sep 14, 2021

Discovered

May 12, 2022

Filed

vs. sector median

+16 wks slower

This filing is one of 5 about the same incident.View merged incident

A leak claim by conti about this victim predates this filing by 232 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecontibd_f6e7008bc65cb71d2021-09-22 · +232dVerified by operator

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_29b68aa201aa0b932022-05-12Verified
Indiana State AGbd_e8d29031cea102382022-05-12Verified by operator
Massachusetts State AGbd_ec433dc0ab71e92a2022-05-12Verified by operator

Name: Marans Newman Tsolis & Nazinitsky LLC
norm: marans newman tsolis nazinitsky

Name: Marans Newman Tsolis & Nazinitsky LLC
norm: marans newman tsolis nazinitsky
Industry: Professional Servicesllm

Discovered: Sep 14, 2021
Materiality determined: —
Notification sent: May 12, 2022
Affected individuals: 4state-resident count only
Data types: Government IDIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified the Federal Bureau of Investigation
Initial access: exploit_public_facing

During the incident: Engaged cybersecurity experts to assist with the investigation
Launched a comprehensive data review project
Notified the Federal Bureau of Investigation
Offered complimentary identity monitoring and identity theft restoration services through IDX
Changes made: Implemented enhanced security measures to help prevent a similar incident from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 34 weeks(240 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGMay 12 · first

Indiana State AGMay 12 · first

Massachusetts State AGMay 12 · first

New Hampshire State AGMay 12 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/marans-newman-tsolis-nazinitsky-20220512.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 12, 2022
Raw hash: 83b7e7bb59b3c656747bd743850532dcc5e51e65587be18154ca89520f8b4f39

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityMarans Newman Tsolis & Nazinitsky LLC

Victim entityMarans Newman Tsolis & Nazinitsky LLC

Incidentdiscovered Sep 14, 2021

Stated responseEngaged cybersecurity experts to assist with the investigation

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov