MalwareProfessional ServicesProfessional ServicesRansomwareData EncryptedCustomer Data InvolvedIdentity (basic)PIILowContained

Berman & Rabin

bd_51c4dfdefb47c41b · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 8, 2024

Filed

Jan 28, 2025

To disclose

29 weeks

Affected

Not disclosed

Linked

13 filings

Confidence

66%

Full breach record for Berman & Rabin →3 incidents on file

Berman & Rabin, P.A. notified individuals of a ransomware incident occurring between July 5-8, 2024. An unknown actor encrypted files and may have accessed personal information (names). 352 Rhode Island residents were identified as potentially impacted. The firm engaged federal law enforcement and offered 12-24 months of credit monitoring via IDX.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 3 days

discovery → filing · 29 weeks / 204 days

Jul 5, 2024

Begins

Jul 8, 2024

Discovered

Jan 28, 2025

Filed

vs. sector median

+11 wks slower

This filing is one of 13 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Maine State AGbd_010c6552c51197a72025-01-28Candidate
Nebraska State AGbd_14fd7a1f40f921a42025-01-28Verified
Washington State AGbd_55a4ecdc640d53672025-01-28Verified
New Hampshire State AGbd_57200978e1d048382025-01-28Verified

Show 6 more filings ↓up to 1d gap

Iowa State AGbd_649bb4e63805c3382025-01-28Verified
Indiana State AGbd_67dbf6cb77ebe9522025-01-28Verified
Montana State AGbd_ade90aa399a9c1d72025-01-28Verified
Vermont State AGbd_d19726f54b2626262025-01-28Verified
Oregon State AGbd_d4c9531320fcd7c22025-01-28Verified
South Carolina State AGbd_e7c454baabfa844d2025-01-29 · +1dVerified

Showing first 10 of 12 linked disclosures.

Name: Berman & Rabin
norm: berman rabin
Domain: bermanrabin.com

Name: Berman & Rabin
norm: berman rabin
Domain: bermanrabin.com
Industry: Professional Servicesllm

Discovered: Jul 8, 2024
Breach occurred: Jul 5, 2024 – Jul 8, 2024
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 23, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: notified federal law enforcement
Initial access: valid_credentials

During the incident: Took steps to secure our environment and to launch an investigation
Notified federal law enforcement
Offering you access to credit monitoring and identity restoration services for 12/24 months at no cost to you, through IDX
Reviewed our security policies and procedures and are implementing additional security measures
Changes made: Implementing additional security measures to reduce the risk of similar future events
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 weeks(204 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 11 states

View merged incident ↗

Maine State AGJan 28 · first

Nebraska State AGJan 28 · first

Washington State AGJan 28 · first

New Hampshire State AGJan 28 · first

Iowa State AGJan 28 · first

Indiana State AGJan 28 · first

Montana State AGJan 28 · first

Vermont State AGJan 28 · first

Oregon State AGJan 28 · first

Delaware State AGJan 28 · first · this page

South Carolina State AG+1d

Cascade drawn from the first 10 linked disclosures of 12 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2025/03/Berman-Rabin-P.A-Notice-of-Data-Event.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 28, 2025
Raw hash: 245029c854183432335087e80fef427f33011277fc19439ea7057538c258ca9f

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityBerman & Rabin

Victim entityBerman & Rabin

Incidentdiscovered Jul 8, 2024

Stated responseTook steps to secure our environment and to launch an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceattorneygeneral.delaware.gov