MalwareProfessional ServicesProfessional ServicesRansomwareCapture Stored DataData ExfiltratedData EncryptedPIIIdentity (basic)LowContained

Bricker & Eckler LLP

bd_050810a4d81cb519 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 31, 2021

Filed

Apr 6, 2021

To disclose

9 weeks

Affected

15state residents only

Linked

7 filings

Confidence

65%

Full breach record for Bricker & Eckler LLP →

Bricker & Eckler LLP notified Montana residents of a ransomware attack discovered on January 31, 2021. Unauthorized access occurred between January 14 and 31, 2021, resulting in the exfiltration of personal information (name, address, variable data). Bricker engaged forensic experts, notified law enforcement, recovered the data, and offered one year of Experian IdentityWorks monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 17 days

discovery → filing · 9 weeks / 65 days

Jan 14, 2021

Begins

Jan 31, 2021

Discovered

Apr 6, 2021

Filed

vs. sector median

8 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Indiana State AGbd_213787199d8bafc32021-04-06Verified
New Hampshire State AGbd_819ff00206636e792021-04-05 · +1dVerified
Massachusetts State AGbd_0a51a13ab48a05232021-04-02 · +4dVerified
Maine State AGbd_795e89cdbfda35b42021-04-02 · +4dCandidate

Show 2 more filings ↓up to 4d gap

California State AGbd_83445976027bfd5e2021-04-02 · +4dVerified
HHS OCRbd_fc0ed20e70edc30d2021-04-02 · +4dVerified

Name: Bricker & Eckler LLP
norm: bricker eckler

Name: Bricker & Eckler LLP
norm: bricker eckler
Industry: Professional Servicesllm

Discovered: Jan 31, 2021
Breach occurred: Jan 14, 2021 – Jan 31, 2021
Undetected for: 17 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 6, 2021
Affected individuals: 15state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: notified federal law enforcement

During the incident: Took measures to contain the incident
Launched an investigation
Engaged third-party cybersecurity forensic experts
Notified federal law enforcement
Retrieved the data involved from the unauthorized party
Took steps to delete the data
Changes made: Implemented additional security protocols designed to enhance the security of Bricker’s network, internal systems and applications
Offered a complimentary one-year membership of Experian’s IdentityWorks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(65 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Massachusetts State AGApr 2 · first

Maine State AGApr 2 · first

California State AGApr 2 · first

HHS OCRApr 2 · first

New Hampshire State AG+3d

Indiana State AG+4d

Montana State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/bricker-notif.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 6, 2021
Raw hash: e111efaacb3a79f17e49303a08443577c4e6e913e30891cb6c5064fe80c490e6

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityBricker & Eckler LLP

Victim entityBricker & Eckler LLP

Incidentdiscovered Jan 31, 2021

Stated responseTook measures to contain the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov