MalwareRansomwareData EncryptedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTMediumContained
Spear Wilderman
bd_3632d4322b02fd42 · schema v1 · pii pii-v1
Full breach record for Spear Wilderman →Spear Wilderman, P.C., a labor law firm, notified the New Hampshire Attorney General of a cybersecurity incident detected on May 7, 2021. An unauthorized third party infiltrated the network and encrypted data. The incident potentially exposed personal information of 30 New Hampshire residents, including names, driver's licenses, SSNs, medical info, and financial account data. SWP engaged forensic investigators, secured the network, reported to law enforcement, and offered 12 months of credit monitoring.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_cd72a81e7b2707f6Maine State AGfiled 2022-11-17Verified
- bd_875e30e2b1ddabe3Delaware State AGfiled 2022-11-16(1d gap)Candidate
- bd_d619cce399c1310aDelaware State AGfiled 2022-11-16(1d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/spear-wilderman-20221117.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 17, 2022
- Raw hash
- 177d6ae835bd80bf467c89514027a27ca6482da88a4d3f5d5ff9dd2331c20a83
Reporting entity
- Name
- Spear Educationnorm: spear education
- Domain
- speareducation.com
Victim entity
- Name
- Spear Wildermannorm: spear wilderman
- Domain
- spearwilderman.com
Incident
- Discovered
- May 7, 2021
- Materiality determined
- —
- Notification sent
- Nov 16, 2022
- Affected individuals
- 30
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Reported this matter to law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 19 months(559 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.