HackingProfessional ServicesProfessional ServicesStolen CredentialsTargetedPIIIdentity (basic)Government IDFinancialMediumResolved

Schiller Ducanto and Fleck LLP

bd_33f414623cc9bf1f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 26, 2021

Filed

Apr 14, 2021

To disclose

7 weeks

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Schiller Ducanto and Fleck LLP →

Schiller DuCanto and Fleck LLP notified clients of a cybersecurity attack discovered on February 26, 2021. Unauthorized access to client files containing PII (name, DOB, SSN, financial info) was confirmed for some individuals. The firm took systems offline, engaged forensic experts, and offered 12 months of Kroll identity monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 weeks / 47 days

Feb 26, 2021

Discovered

Apr 14, 2021

Filed

vs. sector median

11 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_a349e5686d3cda9c2021-04-13 · +1dVerified

Name: Schiller Ducanto and Fleck LLP
norm: schiller ducanto and fleck

Name: Schiller Ducanto and Fleck LLP
norm: schiller ducanto and fleck
Industry: Professional Servicesllm

Discovered: Feb 26, 2021
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)Government IDFinancial
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Took affected systems offline
Notified law enforcement
Engaged third-party experts to help investigate the full scope of the matter
Secured the services of Kroll to provide identity monitoring services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(47 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGApr 13 · first

Montana State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/SChiller-Notif.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 14, 2021
Raw hash: be8f21cc8f78018046f59fb5925e9f2c1a30723fd89ef474f87faff9bfafa48f

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entitySchiller Ducanto and Fleck LLP

Victim entitySchiller Ducanto and Fleck LLP

Incidentdiscovered Feb 26, 2021

Stated responseTook affected systems offline

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov