HackingProfessional ServicesProfessional ServicesPhishingStolen CredentialsTargetedCustomer Data InvolvedIdentity (basic)Financial accountLowContained

Weiss Zarett Brofman Sonnenklar & Levy, P.C.

bd_62a7c96f230186e3 · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 4, 2021

Filed

Mar 4, 2022

To disclose

48 weeks

Affected

Confidence

66%

Full breach record for Weiss Zarett Brofman Sonnenklar & Levy, P.C. →

Weiss Zarett Brofman Sonnenklar & Levy, P.C. notified the NH AG of unauthorized access to a business email account from Feb 17 to Apr 4, 2021. The incident affected 2 NH residents, exposing names, addresses, and financial account info. The firm engaged forensic specialists, reset passwords, and provided 2 years of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 46 days

discovery → filing · 48 weeks / 334 days

Feb 17, 2021

Begins

Apr 4, 2021

Discovered

Mar 4, 2022

Filed

vs. sector median

+33 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Name: Weiss Zarett Brofman Sonnenklar & Levy, P.C.
norm: weiss zarett brofman sonnenklar levy
Industry: professional_services

Name: Weiss Zarett Brofman Sonnenklar & Levy, P.C.
norm: weiss zarett brofman sonnenklar levy
Industry: professional_services
Industry: Professional Servicesllm

Discovered: Apr 4, 2021
Breach occurred: Feb 17, 2021 – Apr 4, 2021
Undetected for: 46 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 28, 2022
Affected individuals: 2state + nationwide
Data types: Identity (basic)Financial account
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified Office of the New Hampshire Attorney General
Initial access: phishing_link

During the incident: Launched an investigation, with the assistance of third-party forensic specialists
Reviewed the contents of the affected account
Provided written notice of this incident to affected individuals
Working to implement additional safeguards and training to its employees
Providing access to credit monitoring services for two (2) years, through Kroll
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Changing the password for the affected account
Changes made: Implement additional safeguards and training to its employees
Review policies and procedures relating to data privacy and security
Changing the password for the affected account
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 48 weeks(334 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/weiss-zarett-brofman-sonnenklar-levy-20220304.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 4, 2022
Raw hash: 411cf45f702511658f456dfe606b71a8530d012168a75c84548a4348a7222331

Reporting entityWeiss Zarett Brofman Sonnenklar & Levy, P.C.

Victim entityWeiss Zarett Brofman Sonnenklar & Levy, P.C.

Incidentdiscovered Apr 4, 2021

Stated responseLaunched an investigation, with the assistance of third-party forensic specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov