MalwareProfessional ServicesProfessional ServicesRansomwareData ExfiltratedCustomer Data InvolvedMulti-Stage ChainIdentity (basic)Government IDMediumContained

Gerald O. Dry, P.A.

bd_0769d294bcecc2c3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 7, 2022

Filed

Jul 14, 2022

To disclose

22 weeks

Affected · nationwide

72 in this filing

Linked

8 filings

Confidence

66%

Full breach record for Gerald O. Dry, P.A. →

Supplemental notice for Gerald O. Dry, P.A. regarding a malware incident affecting tax return data. Initial notice filed March 2022; this update covers 2 additional NH residents (dependents). Incident involved malware on servers storing PII (names, DOB, SSNs). First awareness Feb 7, 2022. Remediation included MFA, password resets, and IDX identity protection.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 402 days

discovery → filing · 22 weeks / 157 days

Jan 1, 2021

Begins

Feb 7, 2022

Discovered

Jul 14, 2022

Filed

vs. sector median

+4 wks slower

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Maine State AGbd_7c0bbf056678b1f72022-07-08 · +6dVerified
Maine State AGbd_528d83810e534da12022-07-07 · +7dVerified
Indiana State AGbd_6e1db01e7c9263352022-03-31 · +105dVerified
New Hampshire State AGbd_2102c9cb166c9fc02022-03-29 · +107dVerified

Show 3 more filings ↓up to 111d gap

Massachusetts State AGbd_ffd0dea4dcfb61592022-03-28 · +108dVerified
Maine State AGbd_291afac806984e582022-03-25 · +111dCandidate
Maine State AGbd_ccd59a6e942f48e12022-03-25 · +111dCandidate

Name: Brooks, Pierce, McLendon, Humphrey & Leonard, L.L.P.
norm: brooks pierc mclendon humphrey leonard

Name: Gerald O. Dry, P.A.
norm: gerald o dry
Industry: Professional Servicesllm

Discovered: Feb 7, 2022
Breach occurred: Jan 1, 2021 – Jun 8, 2021
Undetected for: 402 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 25, 2022
Affected individuals: 7state + nationwide
Data types: Identity (basic)Government ID
Attack vector: Unknown
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified the Internal Revenue ServiceNotified the Federal Bureau of InvestigationNotified relevant state agenciesProvided information to the state Federation of Tax Administrators
Initial access: external_remote_services

During the incident: Resetting passwords and turning on two-factor authentication for all users
Brought in third-party professionals to investigate
Confirmed that there is no malicious software present on or suspicious activity in our systems
Notified the Internal Revenue Service
Notified the Federal Bureau of Investigation
Notified relevant state agencies
Provided information about this incident and our past tax return filings to the IRS and the state Federation of Tax Administrators
Offering complimentary identity theft protection services through IDX
Changes made: Resetting passwords and turning on two-factor authentication for all users
Offering complimentary identity theft protection services through IDX
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 weeks(157 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 4 states

View merged incident ↗

Maine State AGMar 25 · first

Massachusetts State AG+3d

New Hampshire State AG+4d

Indiana State AG+6d

Maine State AG+104d

Maine State AG+105d

New Hampshire State AG+111d · this page

Pattern: first filing Mar 25 (ME), last Jul 14 (NH) — a 111-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/gerald-o-dry-20220714.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 14, 2022
Raw hash: e9c99b1daba8cb089474e5c5d877181b1dda39f63f41a905fb165bc3de901153

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityBrooks, Pierce, McLendon, Humphrey & Leonard, L.L.P.

Victim entityGerald O. Dry, P.A.

Incidentdiscovered Feb 7, 2022

Stated responseResetting passwords and turning on two-factor authentication for all users

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov