Social EngineeringProfessional ServicesProfessional ServicesPhishingStolen CredentialsTargetedData ExfiltratedPIIIdentity (basic)Government IDHighContained

PILLSBURY WINTHROP SHAW PITTMAN LLP

bd_0ba5f2f7e42e487f · schema v1 · pii pii-v1

Severity

High

Discovered

Apr 30, 2025

Filed

Nov 6, 2025

To disclose

27 weeks

Affected

3,061state residents only

Linked

10 filings

Confidence

64%

Full breach record for PILLSBURY WINTHROP SHAW PITTMAN LLP →3 incidents on file

Pillsbury Winthrop Shaw Pitman LLP disclosed a security incident in late April 2025 where an unauthorized actor accessed firm documents following a social engineering attack. The firm engaged forensic investigators and notified law enforcement. Affected data includes personal information such as names and government IDs. The firm is offering 24 months of credit monitoring via Equifax.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due27 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 10 days

discovery → filing · 27 weeks / 190 days

Apr 20, 2025

Begins

Apr 30, 2025

Discovered

Nov 6, 2025

Filed

vs. sector median

+9 wks slower

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

New Hampshire State AGbd_4d95cd9f800da5f42025-11-06Verified
Washington State AGbd_5cd3ec15e94a68df2025-11-06Verified
Nebraska State AGbd_8e31e65cc116ce642025-11-06Verified
Montana State AGbd_b215afd6546944fc2025-11-06Candidate

Show 5 more filings ↓up to 1d gap

Iowa State AGbd_b9c1fcb0d2856ca22025-11-06Verified
Delaware State AGbd_c6f6eef2131011f32025-11-06Verified
Indiana State AGbd_dc43924c9e59e1212025-11-06Verified
Massachusetts State AGbd_eaf26ad5c60188452025-11-06Verified
Texas State AGbd_58a008bb40c21d442025-11-07 · +1dVerified

Name: PILLSBURY WINTHROP SHAW PITTMAN LLP
norm: pillsbury winthrop shaw pittman

Name: PILLSBURY WINTHROP SHAW PITTMAN LLP
norm: pillsbury winthrop shaw pittman
Industry: Professional Servicesllm

Discovered: Apr 30, 2025
Breach occurred: Apr 20, 2025 – Apr 30, 2025
Undetected for: 10 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 23, 2025
Affected individuals: 3,061state-resident count only
Data types: PIIIdentity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified law enforcement
Initial access: phishing_link

During the incident: Promptly took steps to stop the unauthorized activity
Began an investigation with assistance from a third-party forensic firm
Notified law enforcement
Added further protections to harden systems
Offering complimentary 24-month membership for credit monitoring and identity theft protection services through Equifax
Changes made: Deploy additional safeguards onto our systems
Reinforcing security practices
Actively reviewing systems to enhance security monitoring and controls
Fortify systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 weeks(190 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.