MalwareProfessional ServicesProfessional ServicesRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedGovernment IDIdentity (basic)Health (basic)MediumContained

Lightfoot, Franklin & White LLC

bd_4669d96fd310ed64 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 17, 2021

Filed

Jun 17, 2021

To disclose

9 weeks

Affected

20state residents only

Linked

5 filings

Confidence

67%

Full breach record for Lightfoot, Franklin & White LLC →2 incidents on file

Lightfoot, Franklin, & White, LLC reported a ransomware incident discovered on April 17, 2021, affecting approximately 20 New Hampshire residents. Unlawful access was gained to client files containing names, SSNs, government IDs, and health information. The firm engaged forensic investigators, law enforcement, and a cybersecurity firm. Compromised data was confirmed destroyed by the attacker. Affected individuals received notification and 12 months of complimentary credit monitoring via Experian.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 9 weeks / 61 days

Apr 17, 2021

Discovered

Jun 17, 2021

Filed

vs. sector median

10 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_40a7b26f5070137c2021-06-16 · +1dVerified
Montana State AGbd_51c7b376f5d05cf52021-06-16 · +1dCandidate
Maine State AGbd_572e92b96b15f33c2021-06-16 · +1dVerified
Indiana State AGbd_6b734de6812539322021-06-16 · +1dVerified

Name: Lightfoot, Franklin & White LLC
norm: lightfoot franklin white
Domain: lightfootlaw.com

Name: Lightfoot, Franklin & White LLC
norm: lightfoot franklin white
Domain: lightfootlaw.com
Industry: Professional Servicesllm

Discovered: Apr 17, 2021
Materiality determined: —
Notification sent: Jun 16, 2021
Affected individuals: 20state-resident count only
Data types: Government IDIdentity (basic)Health (basic)
Data elements: Social Security numberMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Office of the Attorney General

During the incident: Engaged outside consultants to conduct an investigation
Notified law enforcement
Reached a resolution and received confirmation from the third party that the compromised information was destroyed
Engaged a service provider to conduct both public and dark web monitoring
Offered credit monitoring services for 12 months at no cost
Changes made: Implementing endpoint security software on its systems
Enhancing employee education and training
Working with an independent cybersecurity firm to further review and enhance Lightfoot’s security policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(61 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Massachusetts State AGJun 16 · first

Montana State AGJun 16 · first

Maine State AGJun 16 · first

Indiana State AGJun 16 · first

New Hampshire State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/lightfoot-franklin-white-20210617.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 17, 2021
Raw hash: 009c0fa34017da0bc6c4cc5e483fedf862bc455877933a049e1a391a5c8d4c1f

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityLightfoot, Franklin & White LLC

Victim entityLightfoot, Franklin & White LLC

Incidentdiscovered Apr 17, 2021

Stated responseEngaged outside consultants to conduct an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov