HackingProfessional ServicesProfessional ServicesData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedPIIGovernment IDIdentity (basic)PHIHealth (basic)HighContained

Wolf Haldenstein Adler Freeman & Herz LLP

bd_3e9cc9ff1838a31e · schema v1 · pii pii-v1

Severity

High

Discovered

Apr 18, 2024

Filed

Jan 28, 2025

To disclose

41 weeks

Affected

16,071state residents only

Linked

16 records

Confidence

66%

Full breach record for Wolf Haldenstein Adler Freeman & Herz LLP →2 incidents on file

Wolf Haldenstein Adler Freeman & Herz LLP, a law firm, notified the Rhode Island Attorney General of a cybersecurity incident discovered on April 18, 2024. Unauthorized access occurred starting December 13, 2023, potentially impacting 16,071 Rhode Island residents. Compromised data included names, SSNs, employee IDs, and medical diagnoses/claims. The firm engaged a cybersecurity firm, secured its network, enhanced privacy policies, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Rhode Island clock✗ RI AG >45d41 weeks discovery → filing

Incident timeline

undetected · 127 days

discovery → filing · 41 weeks / 285 days

Dec 13, 2023

Begins

Apr 18, 2024

Discovered

Jan 28, 2025

Filed

vs. sector median

+21 wks slower

This filing is one of 16 records about the same incident.View merged incident

A leak claim by black_basta about this victim was first seen 403 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Massachusetts State AGbd_8552ef9d273399f82025-01-17 · +11dVerified by operator
South Carolina State AGbd_9b1cd8fcc3d360312025-01-17 · +11dVerified by operator
Iowa State AGbd_f6dabcb4a2c109fc2025-01-17 · +11dVerified by operator
Washington State AGbd_8fc1c900a335fed52025-01-16 · +12dVerified by operator

Show 6 more filings ↓up to 289d gap

Maine State AGbd_59773b3aabb12e552025-01-15 · +13dVerified
California State AGbd_d2bd2e440c25b7392025-01-15 · +13dVerified by operator
New Hampshire State AGbd_01c8c467936f5ef02025-01-14 · +14dVerified by operator
Indiana State AGbd_3f19b595050c24cc2025-01-13 · +15dVerified
Maryland State AGbd_747af5a683f6a74f2025-11-13 · +289dVerified by operator
Maryland State AGbd_96d242fcec7fed342025-11-13 · +289dVerified by operator

Showing first 10 of 15 linked disclosures.

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: Wolf Haldenstein Adler Freeman & Herz LLP
norm: wolf haldenstein adler freeman herz
Domain: whafh.com
Industry: Professional Servicesllm

Discovered: Apr 18, 2024
Breach occurred: Dec 13, 2023
Undetected for: 127 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 13, 2025
Affected individuals: 16,071state-resident count only
Data types: PIIGovernment IDIdentity (basic)PHIHealth (basic)
Data elements: Social Security numberMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
Threat actor: External
Regulator citations: Notified Rhode Island Office of the Attorney General
Initial access: exploit_public_facing

During the incident: Engaged a specialized cybersecurity firm to investigate the nature and scope of the incident
Secured its network
Reviewed and enhanced its existing policies and procedures related to data privacy
Offered complimentary credit monitoring
Changes made: Reviewed and enhanced its existing policies and procedures related to data privacy
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 41 weeks(285 days from discovery to filing)
Compliance flags: RI AG >45dLeak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 10 states

View merged incident ↗

Indiana State AGJan 13 · first

New Hampshire State AG+1d

Maine State AG+2d

California State AG+2d

Washington State AG+3d

Massachusetts State AG+4d

South Carolina State AG+4d

Iowa State AG+4d

Rhode Island State AG+15d · this page

Maryland State AG+304d

Pattern: first filing Jan 13 (IN), last Nov 13 (MD) — a 304-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 15 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://riag.ri.gov/media/7381/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 28, 2025
Raw hash: 07cefa806faf643a577f4dfd55af74cabd8982140bf5e29a8bfbe4420439166a

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityWolf Haldenstein Adler Freeman & Herz LLP

Incidentdiscovered Apr 18, 2024

Stated responseEngaged a specialized cybersecurity firm to investigate the nature and scope of the incident

ComplianceRI AG >45d

Extraction provenanceno artifact recorded

Source provenanceriag.ri.gov