MalwareRansomwareData ExfiltratedRansom DemandedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTMediumContained
Woods & Woods, LLC
bd_3277d91e56be0ec3 · schema v1 · pii pii-v1
Full breach record for Woods & Woods, LLC →Woods & Woods LLC, a law firm, suffered a ransomware attack on January 15, 2020. The firm became aware of the incident on February 1, 2020. Attackers claimed to have stolen data, including names, addresses, dates of birth, Social Security numbers, medical information, and bank account/routing numbers. The firm engaged forensic investigators and notified the FBI. Identity monitoring services were provided to affected individuals.
California clockDiscovered Feb 1, 2020 → Notified Feb 25, 202024d ✓ CA 60-day OK6 weeks discovery → filing
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_1b90879736358266South Carolina State AGfiled 2020-03-11Verified
- bd_698c15ef43a2d896Delaware State AGfiled 2020-03-11Verified
- bd_812eb9ab0c104483Oregon State AGfiled 2020-03-11Verified
- bd_092c849f00c8e1b4Montana State AGfiled 2020-03-10(1d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-188145
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 11, 2020
- Raw hash
- e568697ec63ee689df9f88fa1fe1286c6029c0c9db3ed025f8fd46ba976f2786
Reporting entity
- Name
- Woods & Woods, LLCnorm: woods woods
Victim entity
- Name
- Woods & Woods, LLCnorm: woods woods
Incident
- Discovered
- Feb 1, 2020
- Materiality determined
- —
- Notification sent
- Feb 25, 2020
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Contacted the FBI
Compliance
- Time to disclose
- 6 weeks(39 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 24d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 1, 2020→ Notified: Feb 25, 202024d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.