Social EngineeringProfessional ServicesProfessional ServicesPhishingData ExfiltratedCustomer Data InvolvedFinancial accountLowContained

PILLSBURY WINTHROP SHAW PITTMAN LLP

bd_4d95cd9f800da5f4 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Nov 6, 2025

To disclose

—

Affected

4state residents only

Linked

10 filings

Confidence

67%

Full breach record for PILLSBURY WINTHROP SHAW PITTMAN LLP →3 incidents on file

Pillsbury Winthrop Shaw Pitman LLP notified the New Hampshire Attorney General of a security event involving sophisticated social engineering. An unauthorized actor convinced a user to download firm documents, affecting the financial account information of approximately 4 New Hampshire residents. The firm engaged forensic investigators, notified law enforcement, and is offering 24 months of credit monitoring via Equifax. Notifications began November 6, 2025.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Nov 6, 2025

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

South Carolina State AGbd_0ba5f2f7e42e487f2025-11-06Verified
Washington State AGbd_5cd3ec15e94a68df2025-11-06Verified
Nebraska State AGbd_8e31e65cc116ce642025-11-06Verified
Montana State AGbd_b215afd6546944fc2025-11-06Candidate

Show 5 more filings ↓up to 1d gap

Iowa State AGbd_b9c1fcb0d2856ca22025-11-06Verified
Delaware State AGbd_c6f6eef2131011f32025-11-06Verified
Indiana State AGbd_dc43924c9e59e1212025-11-06Verified
Massachusetts State AGbd_eaf26ad5c60188452025-11-06Verified
Texas State AGbd_58a008bb40c21d442025-11-07 · +1dVerified

Name: Orrick, Herrington & Sutcliffe LLP
norm: orrick herrington sutcliffe
Domain: orrick.com

Name: PILLSBURY WINTHROP SHAW PITTMAN LLP
norm: pillsbury winthrop shaw pittman
Industry: professional_services
Industry: Professional Servicesllm

Discovered: —
Materiality determined: —
Notification sent: Nov 6, 2025
Affected individuals: 4state-resident count only
Data types: Financial account
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General's Office
Initial access: phishing_link

During the incident: Engaged a third-party incident response and forensic firm to investigate
Notified law enforcement
Blocked the unauthorized activity
Set up a dedicated call center
Changes made: Reinforced security and network processes and procedures
Enhanced security monitoring and access controls
Reviewed training processes related to phishing and social engineering
Offered two years of complimentary credit monitoring and identity restoration services through Equifax
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 10 states

View merged incident ↗

South Carolina State AGNov 6 · first

Washington State AGNov 6 · first

Nebraska State AGNov 6 · first

Montana State AGNov 6 · first

Iowa State AGNov 6 · first

Delaware State AGNov 6 · first

Indiana State AGNov 6 · first

Massachusetts State AGNov 6 · first

New Hampshire State AGNov 6 · first · this page

Texas State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/pillsbury-winthrop-shaw-pitman-20251106.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 6, 2025
Raw hash: 189910bbdcea8e353694a8d6835a792de610347dfb235acd6de98ceb0ed61826

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityOrrick, Herrington & Sutcliffe LLP

Victim entityPILLSBURY WINTHROP SHAW PITTMAN LLP

IncidentPhishing

Stated responseEngaged a third-party incident response and forensic firm to investigate

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov