HackingStolen CredentialsCustomer Data InvolvedDelayed DiscoveryPHIHEALTH_BASICIDENTITY_BASICLowContained
Orrick, Herrington & Sutcliffe LLP
bd_13c2d48c6c504f77 · schema v1 · pii pii-v1
Full breach record for Orrick, Herrington & Sutcliffe LLP →Orrick, Herrington & Sutcliffe LLP experienced a security incident where an unauthorized third party gained remote access to a portion of its network on March 10, 2023. The breach was detected on March 13, 2023. The incident involved personal information of plan participants, including health insurance data (PHI), stored in connection with Orrick's representation of MultiPlan, Inc. Orrick blocked access, engaged forensic experts, notified law enforcement, and is offering two years of identity monitoring.
This filing is one of 13 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_2219323be28eb8d7Oregon State AGfiled 2023-08-18(3d gap)Verified
- bd_cc48c408ae3ef894Maine State AGfiled 2023-08-18(3d gap)Verified
- bd_3fe3320cbc86fe1bCalifornia State AGfiled 2023-08-14(7d gap)Verified
- bd_cbf3d3e27848f13eCalifornia State AGfiled 2023-07-31(21d gap)Verified
Show 6 more filings ↓Show fewer ↑up to 52d gap
- bd_d10cdbb5d734268cMaine State AGfiled 2023-07-20(32d gap)Verified
- bd_e91b9e52ec6efee0Maine State AGfiled 2023-07-20(32d gap)Verified
- bd_eb15c77ac453f478California State AGfiled 2023-07-20(32d gap)Verified
- bd_4e6e3b6b46e7862bNew Hampshire State AGfiled 2023-07-03(49d gap)Verified
- bd_47f8b56acf0704e4Oregon State AGfiled 2023-06-30(52d gap)Verified
- bd_6acd93d28371c8a0Washington State AGfiled 2023-06-30(52d gap)Verified
Showing first 10 of 12 linked disclosures.
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-572159
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 21, 2023
- Raw hash
- 702878261d119326998c9065b8b155586dd30dce5e200d631b16db3bc29417ca
Reporting entity
- Name
- Orrick, Herrington & Sutcliffe LLPnorm: orrick herrington sutcliffe
- Domain
- orrick.com
Victim entity
- Name
- Orrick, Herrington & Sutcliffe LLPnorm: orrick herrington sutcliffe
- Domain
- orrick.com
Incident
- Discovered
- Mar 13, 2023
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
Compliance
- Time to disclose
- 23 weeks(161 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.