MalwareProfessional ServicesProfessional ServicesRansomwareData EncryptedCustomer Data InvolvedGovernment IDIdentity (basic)MediumContained

Eckell, Sparks, Levy, Auerbach, Monte, Sloane, Matthews & Auslander, P.C

bd_046cecae47c54f20 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Aug 22, 2024

To disclose

—

Affected

Not disclosed

Linked

4 filings

Confidence

65%

Full breach record for Eckell, Sparks, Levy, Auerbach, Monte, Sloane, Matthews & Auslander, P.C →3 incidents on file

Eckell, Sparks, Levy, Auerbach, Monte, Sloane, Matthews & Auslander, P.C. experienced a ransomware incident on November 21, 2023. The incident potentially compromised personal information including Date of Birth and Social Security Numbers, as well as privileged legal communications. The firm engaged forensic investigators, notified the FBI, and is offering 12 months of credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Nov 21, 2023

Begins

Aug 22, 2024

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Montana State AGbd_ea25c96fcbea9d6f2024-08-21 · +1dCandidate
Indiana State AGbd_e2db7d46c30da3f32024-08-19 · +3dVerified
New Hampshire State AGbd_8f628ea1b589d2192024-08-27 · +5dVerified

Name: Eckell, Sparks, Levy, Auerbach, Monte, Sloane, Matthews & Auslander, P.C
norm: eckell sparks levy auerbach monte sloane matthews auslander
Domain: eckellsparks.com

Name: Eckell, Sparks, Levy, Auerbach, Monte, Sloane, Matthews & Auslander, P.C
norm: eckell sparks levy auerbach monte sloane matthews auslander
Domain: eckellsparks.com
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Nov 21, 2023
Materiality determined: —
Notification sent: Aug 19, 2024
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Filed a report with the FBIProviding notice to privacy regulators

During the incident: Promptly launched an investigation
Engaged a national cybersecurity firm to assist in assessing the scope of the incident
Took steps to mitigate the potential impact to our community
Immediately secured the environment in question
Took steps to prevent further unauthorized access
Engaged a third-party digital forensics investigator to conduct an exhaustive investigation
Filed a report with the FBI
Providing notice to privacy regulators and other parties as required
Changes made: Working to implement additional safeguards and security measures to enhance the privacy and security of information in our systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >180d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGAug 19 · first

Montana State AG+2d

Vermont State AG+3d · this page

New Hampshire State AG+8d

Pattern: first filing Aug 19 (IN), last Aug 27 (NH) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2024-08-22-eckell-sparks-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 22, 2024
Raw hash: 0ea8353758f2fe50724542ab111717a456fc5cd63d35a38f0d238ecd43e747d7

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityEckell, Sparks, Levy, Auerbach, Monte, Sloane, Matthews & Auslander, P.C

Victim entityEckell, Sparks, Levy, Auerbach, Monte, Sloane, Matthews & Auslander, P.C

IncidentRansomware

Stated responsePromptly launched an investigation

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov