DisclosureLens
AccidentalProfessional ServicesProfessional ServicesMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDMediumContained

WILMER CUTLER PICKERING HALE AND DORR LLP

bd_0f58950e180387e0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 8, 2026

Filed

Jul 10, 2026

To disclose

9 weeks

Affected

Not disclosed

Linked

15 filings

Confidence

64%
Full breach record for WILMER CUTLER PICKERING HALE AND DORR LLP →

On May 8, 2026, Wilmer Cutler Pickering Hale and Dorr LLP mistakenly provided personal information, including names and Social Security Numbers, to an unauthorized third party who misrepresented their identity. The firm promptly investigated, retained forensic experts, and notified federal law enforcement. The incident was isolated, with no direct system access by the third party. Affected individuals are offered 24 months of credit monitoring and identity theft protection through Experian.

Incident timeline

discovery → filing · 9 weeks / 63 days

May 8, 2026

Begins

May 8, 2026

Discovered

Jul 10, 2026

Filed

vs. sector median

10 wks faster

This filing is one of 15 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Show 6 more filings ↓up to 42d gap

Showing first 10 of 14 linked disclosures.

Filing propagation · 11 filings · 9 states

View merged incident ↗
Nebraska State AGJul 10 · first
Massachusetts State AGJul 10 · first
Massachusetts State AGJul 10 · first
California State AGJul 10 · first · this page
Texas State AG+4d
Washington State AG+5d
Oregon State AG+26d
Delaware State AG+33d
South Carolina State AG+33d
New Hampshire State AG+40d
Texas State AG+42d

Pattern: first filing Jul 10 (NE), last Aug 21 (TX) — a 42-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 14 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.