HackingStolen CredentialsCapture Stored DataData ExfiltratedData EncryptedCustomer Data InvolvedDelayed DiscoveryMulti-Stage ChainPHIHEALTH_BASICPIIIDENTITY_BASICFINANCIAL_ACCOUNTHighContained
Orrick, Herrington & Sutcliffe LLP
bd_495af8b2c9c47aa2 · schema v1 · pii pii-v1
Full breach record for Orrick, Herrington & Sutcliffe LLP →Orrick, Herrington & Sutcliffe LLP notified the New Hampshire Attorney General of a cybersecurity incident detected in March 2023. The breach compromised the personal and protected health information of 637,620 individuals, including vision plan members. The firm engaged forensic investigators, notified law enforcement, and offered two years of complimentary credit monitoring. A class action settlement of $8 million was approved to resolve claims regarding the breach.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_4077fe815e7521caMaine State AGfiled 2024-01-24(19d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/orrick-herrington-sutcliffe-20240105.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 5, 2024
- Raw hash
- 4e1ec65255bc18bef4cb0d9c04c93c817d712ea324230cf88854e51c7791f3d4
Reporting entity
- Name
- Orrick, Herrington & Sutcliffe LLPnorm: orrick herrington sutcliffe
- Domain
- orrick.com
- Industry
- Legal Services
Victim entity
- Name
- Orrick, Herrington & Sutcliffe LLPnorm: orrick herrington sutcliffe
- Domain
- orrick.com
- Industry
- Legal Services
Incident
- Discovered
- Mar 13, 2023
- Materiality determined
- —
- Notification sent
- Jan 5, 2024
- Affected individuals
- 637,620
- Data types
- PHIHEALTH_BASICPIIIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1119 Automated CollectionT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notification with New Hampshire Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 43 weeks(298 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.