McCormick & Priore
bd_26fbf6fa438ec021 · schema v1 · pii pii-v1
Full breach record for McCormick & Priore →Press / market disclosure — not a breach-notification filing
A media or market posting that confirms an incident but carries no breach-notification fields, so compliance clocks aren't assessable. The summary below is extracted from the coverage — verify against the source.
Data Breach Notification. McCormick & Priore PC: On May 27, 2025, McCormick & Priore PC notified individuals of a security incident that may have exposed personal information. The firm is providing complimentary credit and cyber monitoring services, identity theft insurance, and fraud remediation assistance through CyberScout. Recipients are urged to review credit reports and account statements for suspicious activity and consider placing fraud alerts or credit freezes as needed. Linked ransomware group: interlock.
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Dec 9, 2024
Press report
—
Corroborated · see linked filings
This record's own dates cannot anchor compliance clocks; see the linked filings.
Attack → press
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Ransomware claims (1)
- Leak Siteinterlockbd_62ddc0e1355717932024-11-26 · +13dCandidate
Regulatory filings (1) · sorted by filing gap
- New Hampshire State AGbd_10c4c7b4f10da1fe2025-06-09 · +182dVerified by operator
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- incident type + narrative only (may be machine-translated)
- discovery date
- materiality
- affected count
- data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
interlock
According to ransomware.live, Interlock is a ransomware group first observed in September 2024 that targets critical infrastructure sectors including healthcare, government, education, and technology across North America and Europe using double-extortion, with 57+ claimed victims including a major US dialysis provider exposing over two million patient records.