HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedPIIMediumResolved

Wolf Haldenstein Adler Freeman & Herz LLP

bd_59773b3aabb12e55 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 18, 2024

Filed

Jan 15, 2025

To disclose

39 weeks

Affected · nationwide

3,4453,220 in this filing

Linked

16 records

Confidence

77%

Full breach record for Wolf Haldenstein Adler Freeman & Herz LLP →2 incidents on file

Wolf Haldenstein Adler Freeman & Herz LLP, a New York-based law firm, reported an external system breach (hacking) that occurred on December 13, 2023 and was discovered on April 18, 2024. Approximately 3,445,537 individuals were affected in total, including 3,220 Maine residents. Substitute notice was issued with consumer notifications sent on May 23, 2024 and January 13, 2025. Affected individuals were offered 12 months of complimentary credit monitoring and identity protection services.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d39 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 127 days

discovery → filing · 39 weeks / 272 days

Dec 13, 2023

Begins

Apr 18, 2024

Discovered

Jan 15, 2025

Filed

vs. sector median

+19 wks slower

This filing is one of 16 records about the same incident.View merged incident

A leak claim by black_basta about this victim was first seen 390 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

California State AGbd_d2bd2e440c25b7392025-01-15Verified by operator
Washington State AGbd_8fc1c900a335fed52025-01-16 · +1dVerified by operator
New Hampshire State AGbd_01c8c467936f5ef02025-01-14 · +1dVerified by operator
Massachusetts State AGbd_8552ef9d273399f82025-01-17 · +2dVerified by operator

Show 6 more filings ↓up to 302d gap

South Carolina State AGbd_9b1cd8fcc3d360312025-01-17 · +2dVerified by operator
Iowa State AGbd_f6dabcb4a2c109fc2025-01-17 · +2dVerified by operator
Indiana State AGbd_3f19b595050c24cc2025-01-13 · +2dVerified
Rhode Island State AGbd_3e9cc9ff1838a31e2025-01-28 · +13dVerified
Maryland State AGbd_747af5a683f6a74f2025-11-13 · +302dVerified by operator
Maryland State AGbd_96d242fcec7fed342025-11-13 · +302dVerified by operator

Showing first 10 of 15 linked disclosures.

Name: Wolf Haldenstein Adler Freeman & Herz LLP
norm: wolf haldenstein adler freeman herz
Domain: whafh.com
Industry: Legal Services

Name: Wolf Haldenstein Adler Freeman & Herz LLP
norm: wolf haldenstein adler freeman herz
Domain: whafh.com
Industry: Legal Services
Industry: Professional Servicesllm

Discovered: Apr 18, 2024
Breach occurred: Dec 13, 2023
Undetected for: 127 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 23, 2024
Affected individuals: 3,445state + nationwide
Data types: PII
Attack vector: Unauthorized Access
Threat actor: External

During the incident: Substitute notice issued
Consumer notification sent on 5/23/2024 and 01/13/2025
Identity theft protection services offered (12 months complimentary credit monitoring and identity protection)
Changes made: 12 Months complimentary credit monitoring and identity protection services offered to affected individuals
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 39 weeks(272 days from discovery to filing)
Compliance flags: Leak >180dME AG >30d · 272dME CRA notice due
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Apr 18, 2024
→ Filed with AG: Jan 15, 2025
272d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Apr 18, 2024 → Filed with AG: Jan 15, 2025	272d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 10 states

View merged incident ↗

Indiana State AGJan 13 · first

New Hampshire State AG+1d

California State AG+2d

Maine State AG+2d · this page

Washington State AG+3d

Massachusetts State AG+4d

South Carolina State AG+4d

Iowa State AG+4d

Rhode Island State AG+15d

Maryland State AG+304d

Pattern: first filing Jan 13 (IN), last Nov 13 (MD) — a 304-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 15 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/8fe1643f-846d-45b5-bc4f-8d3c7a9a8fee.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 15, 2025
Raw hash: 7adac17a9403f7f836715cff8084e7ef08329642f87d3be9ce5e25b50d613709

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityWolf Haldenstein Adler Freeman & Herz LLP

Victim entityWolf Haldenstein Adler Freeman & Herz LLP

Incidentdiscovered Apr 18, 2024

Stated responseSubstitute notice issued

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov