MalwareProfessional ServicesFinancial ServicesProfessional ServicesRansomwareData ExfiltratedRansom DemandedIdentity (basic)Government IDFinancial accountPHIHealth (basic)MediumContained

Iannuzzi Manetta & Co, P.C.

bd_316937ba71c425d7 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 1, 2024

Filed

Jan 21, 2025

To disclose

25 weeks

Affected

12state residents only

Linked

5 filings

Confidence

66%

Full breach record for Iannuzzi Manetta & Co, P.C. →

Iannuzzi Manetta & Company P.C. reported a ransomware incident discovered on August 1, 2024, where unknown actors encrypted its network. Forensic investigation revealed unauthorized access to client data including PII, PHI, and financial info. 12 Maryland residents were affected. The FBI was notified, and credit monitoring was offered.

J jump to incidentP pin to compareR raw source

Maryland clock✗ MD AG >90d25 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 25 weeks / 173 days

Aug 1, 2024

Begins

Aug 1, 2024

Discovered

Jan 21, 2025

Filed

vs. sector median

+6 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_21bec0c969f787242025-01-17 · +4dCandidate
Massachusetts State AGbd_4ab83876d0c674292025-01-17 · +4dVerified
Maine State AGbd_715b6a27d57bbf542025-01-17 · +4dVerified
Nebraska State AGbd_99c5643d4e79d77f2025-01-17 · +4dVerified

Name: Butzel Long Attorneys and Counselors
norm: butzel long attorneys and counselors

Name: Iannuzzi Manetta & Co, P.C.
norm: iannuzzi manetta
Industry: Professional ServicesllmFinancial Servicesllm

Discovered: Aug 1, 2024
Breach occurred: Aug 1, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 17, 2025
Affected individuals: 12state-resident count only
Data types: Identity (basic)Government IDFinancial accountPHIHealth (basic)
Data elements: Social Security numberMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified Maryland Attorney General

During the incident: Shut down the network
Engaged third-party forensic and legal experts
Forensic experts contained the incident and restored network
FBI was notified of the incident and assisted with investigation
Changes made: Implementing recommendations of forensics experts
Offering complimentary 24-month membership of Experian’s IdentityWorks
Engaging a third-party managed services provider
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 weeks(173 days from discovery to filing)
Compliance flags: MD AG >90d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGJan 17 · first

Massachusetts State AGJan 17 · first

Maine State AGJan 17 · first

Nebraska State AGJan 17 · first

Maryland State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376299.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 21, 2025
Raw hash: e9211dfa9ee8ff079b34d235d236274471260c43404830c22827a2c3c5e32e57

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityButzel Long Attorneys and Counselors

Victim entityIannuzzi Manetta & Co, P.C.

Incidentdiscovered Aug 1, 2024

Stated responseShut down the network

ComplianceMD AG >90d

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov