MalwareProfessional ServicesProfessional ServicesRansomwareRansom DemandedData ExfiltratedIdentity (basic)Government IDMediumContained

Kingsley and Kingsley Lawyers

bd_660598c74cbcbc12 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 22, 2021

Filed

Apr 1, 2022

To disclose

32 weeks

Affected

6state residents only

Linked

7 filings

Confidence

66%

Full breach record for Kingsley and Kingsley Lawyers →

Kingsley & Kingsley Lawyers experienced a ransomware attack on August 21-22, 2021, affecting client PII including names and Social Security numbers. The firm engaged forensic investigators, notified law enforcement, and provided one year of identity monitoring via Kroll. The incident was contained by disconnecting servers.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 32 weeks / 222 days

Aug 21, 2021

Begins

Aug 22, 2021

Discovered

Apr 1, 2022

Filed

vs. sector median

+13 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Indiana State AGbd_36ea5ef01e481ba62022-04-01Verified
Oregon State AGbd_57ab81d7d9549f3a2022-04-07 · +6dVerified
Maine State AGbd_0748c9684dc09cf32022-04-15 · +14dVerified
Massachusetts State AGbd_25d81f706178edbd2022-04-15 · +14dVerified

Show 2 more filings ↓up to 17d gap

California State AGbd_f0918a57511e72802022-04-15 · +14dVerified
New Hampshire State AGbd_73097b477c5e10af2022-04-18 · +17dVerified

Name: Kingsley and Kingsley Lawyers
norm: kingsley and kingsley lawyers

Name: Kingsley and Kingsley Lawyers
norm: kingsley and kingsley lawyers
Industry: Professional Servicesllm

Discovered: Aug 22, 2021
Breach occurred: Aug 21, 2021 – Aug 22, 2021
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 6state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Consulted with appropriate law enforcement authorities

During the incident: Engaged forensic investigators and expert legal counsel
Consulted with appropriate law enforcement authorities
Secured the services of Kroll to provide identity monitoring
Implemented additional technical, administrative, and personnel safeguards
Educated employees on identifying and responding to security incidents
Changes made: Implemented additional technical, administrative, and personnel safeguards
Educated employees on identifying and responding to security incidents
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 32 weeks(222 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Indiana State AGApr 1 · first

Montana State AGApr 1 · first · this page

Oregon State AG+6d

Maine State AG+14d

Massachusetts State AG+14d

California State AG+14d

New Hampshire State AG+17d

Pattern: first filing Apr 1 (IN), last Apr 18 (NH) — a 17-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-303.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 1, 2022
Raw hash: eec1694b3e21fb07142398bcc39685ea0c69765e25302d57d0c954683b39ba71

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityKingsley and Kingsley Lawyers

Victim entityKingsley and Kingsley Lawyers

Incidentdiscovered Aug 22, 2021

Stated responseEngaged forensic investigators and expert legal counsel

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov