PhysicalProfessional ServicesProfessional ServicesTheftCustomer Data InvolvedTargetedIdentity (basic)Government IDPIIMediumActive

Sterbick & Associates, P.S.

bd_48067e0dcedb2a2e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 23, 2015

Filed

Sep 26, 2015

To disclose

5 weeks

Affected

500state residents only

Confidence

71%

Full breach record for Sterbick & Associates, P.S. →

Sterbick & Associates, P.S., a law firm in Tacoma, WA, reported the theft of a computer CPU during a burglary on August 23, 2015. The device contained client data, including Social Security numbers, dating back to 2010. The firm notified the Tacoma Police Department and began mailing notices to affected clients, exceeding 500 notices by the filing date of September 26, 2015. Remediation included enhancing office security and migrating to encrypted cloud storage.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 weeks / 34 days

Aug 23, 2015

Begins

Aug 23, 2015

Discovered

Sep 26, 2015

Filed

vs. sector median

13 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed500 affectedView incident

Name: Sterbick & Associates, P.S.
norm: sterbick associates ps
Domain: sterbick.com
Industry: Legal Services

Name: Sterbick & Associates, P.S.
norm: sterbick associates ps
Domain: sterbick.com
Industry: Legal Services
Industry: Professional Servicesllm

Discovered: Aug 23, 2015
Breach occurred: Aug 23, 2015
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 26, 2015
Affected individuals: 500state-resident count only
Data types: Government IDPII
Data elements: Social Security numberName
WA-stated cause: Theft or Mistake
WA-stated duration: lifecycle Unknowndexposure Unknownd
WA-stated discovery: Found after the fact
Attack vector: Unauthorized Access
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Regulator citations: Notified the Washington State Attorney General’s Office

During the incident: Reported to the Tacoma Police Department
Sending out notices to alert clients
Notifying the Washington State Attorney General’s Office
Changes made: Updated and enhanced the office security system
Transferring files and software to encrypted cloud storage
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(34 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM9588.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 26, 2015
Raw hash: d1c369378a035474a6ad2d77783f929fb6fe76422141e4390f24986fb23d7bcb

Reporting entitySterbick & Associates, P.S.

Victim entitySterbick & Associates, P.S.

Incidentdiscovered Aug 23, 2015

Stated responseReported to the Tacoma Police Department

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com