HackingCustomer Data InvolvedData ExfiltratedPIIIDENTITY_BASICLowContained
Orrick, Herrington & Sutcliffe LLP
bd_4e6e3b6b46e7862b · schema v1 · pii pii-v1
Full breach record for Orrick, Herrington & Sutcliffe LLP →Orrick, Herrington & Sutcliffe, LLP notified the NH Attorney General of a security incident detected on March 13, 2023. An unauthorized third party gained remote access to a file share, obtaining personal information of clients' customers between Feb 28 and Mar 13, 2023. 770 NH residents affected. Orrick engaged forensic experts, notified law enforcement, and offered 2 years of credit monitoring via Kroll.
This filing is one of 13 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_47f8b56acf0704e4Oregon State AGfiled 2023-06-30(3d gap)Verified
- bd_6acd93d28371c8a0Washington State AGfiled 2023-06-30(3d gap)Verified
- bd_d10cdbb5d734268cMaine State AGfiled 2023-07-20(17d gap)Verified
- bd_e91b9e52ec6efee0Maine State AGfiled 2023-07-20(17d gap)Verified
Show 6 more filings ↓Show fewer ↑up to 49d gap
- bd_eb15c77ac453f478California State AGfiled 2023-07-20(17d gap)Verified
- bd_cbf3d3e27848f13eCalifornia State AGfiled 2023-07-31(28d gap)Verified
- bd_3fe3320cbc86fe1bCalifornia State AGfiled 2023-08-14(42d gap)Verified
- bd_2219323be28eb8d7Oregon State AGfiled 2023-08-18(46d gap)Verified
- bd_cc48c408ae3ef894Maine State AGfiled 2023-08-18(46d gap)Verified
- bd_13c2d48c6c504f77California State AGfiled 2023-08-21(49d gap)Verified
Showing first 10 of 12 linked disclosures.
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/orrick-herrington-sutcliffe-20230703.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 3, 2023
- Raw hash
- 44a59d725ecbcd66a54763b40349cbd5badb5a12f5e475317151caea0a0f86e2
Reporting entity
- Name
- Orrick, Herrington & Sutcliffe LLPnorm: orrick herrington sutcliffe
- Domain
- orrick.com
Victim entity
- Name
- Orrick, Herrington & Sutcliffe LLPnorm: orrick herrington sutcliffe
- Domain
- orrick.com
Incident
- Discovered
- Mar 13, 2023
- Materiality determined
- —
- Notification sent
- Jun 30, 2023
- Affected individuals
- 770
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Office of the Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 16 weeks(112 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.