HackingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
State Bar of Georgia
bd_2a24116c20d0760d · schema v1 · pii pii-v1
Full breach record for State Bar of Georgia →The State Bar of Georgia notified the New Hampshire Attorney General on October 7, 2022, of a cybersecurity incident affecting 23 New Hampshire residents. Unauthorized access occurred on April 28, 2022, resulting in the potential exposure of names, addresses, SSNs, driver's license numbers, and direct deposit information. The Bar engaged a third-party cybersecurity firm, notified law enforcement, and offered credit monitoring services to affected individuals.
Leak gap clock⏱ Leak >90d23 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed23 affectedView incident
A leak claim by bitlocker about this victim predates this filing by 158 days.View originating leak claim
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/state-bar-georgia-20221007.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 7, 2022
- Raw hash
- 0eb204bd505186966ef87c5d93d483ca3df8e43ae6ea7157b33951380c69558d
Reporting entity
- Name
- State Bar of Georgianorm: state bar of georgia
- Domain
- gabar.org
Victim entity
- Name
- State Bar of Georgianorm: state bar of georgia
- Domain
- gabar.org
Incident
- Discovered
- Apr 28, 2022
- Materiality determined
- —
- Notification sent
- Oct 7, 2022
- Affected individuals
- 23
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General's Office
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 23 weeks(162 days from discovery to filing)
- Compliance flags
- Leak >90d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.