HackingProfessional ServicesProfessional ServicesStolen CredentialsData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedMulti-Stage ChainCredentialsFinancial accountHealth (basic)Identity (basic)Government IDPHIHighContained

Orrick, Herrington & Sutcliffe LLP

bd_6acd93d28371c8a0 · schema v1 · pii pii-v1

Severity

High

Discovered

Mar 13, 2023

Filed

Jun 30, 2023

To disclose

16 weeks

Affected

6,376state residents only

Linked

19 filings

Confidence

69%

Full breach record for Orrick, Herrington & Sutcliffe LLP →9 incidents on file

Orrick, Herrington & Sutcliffe LLP reported unauthorized third-party remote access to its network in March 2023, affecting client files containing PII, PHI, and financial data. The firm engaged forensic experts, notified law enforcement, and offered credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d16 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 13 days

discovery → filing · 16 weeks / 109 days

Feb 28, 2023

Begins

Mar 13, 2023

Discovered

Jun 30, 2023

Filed

vs. sector median

3 wks faster

This filing is one of 19 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Indiana State AGbd_0c67b8b72d8d4d752023-07-20 · +20dVerified
Maine State AGbd_d10cdbb5d734268c2023-07-20 · +20dVerified
California State AGbd_cbf3d3e27848f13e2023-07-31 · +31dVerified
California State AGbd_3fe3320cbc86fe1b2023-08-14 · +45dVerified

Show 6 more filings ↓up to 69d gap

Oregon State AGbd_2219323be28eb8d72023-08-18 · +49dVerified
California State AGbd_27c346231339764a2023-08-18 · +49dVerified
Maine State AGbd_cc48c408ae3ef8942023-08-18 · +49dVerified
California State AGbd_13c2d48c6c504f772023-08-21 · +52dVerified
New Hampshire State AGbd_196c4027e22ee5fd2023-08-21 · +52dVerified
South Carolina State AGbd_3e42b9abcb8898e52023-09-07 · +69dVerified

Showing first 10 of 18 linked disclosures.

Name: Orrick, Herrington & Sutcliffe LLP
norm: orrick herrington sutcliffe
Domain: orrick.com
Industry: Legal

Name: Orrick, Herrington & Sutcliffe LLP
norm: orrick herrington sutcliffe
Domain: orrick.com
Industry: Legal
Industry: Professional Servicesllm

Discovered: Mar 13, 2023
Breach occurred: Feb 28, 2023 – Mar 13, 2023
Undetected for: 13 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 30, 2023
Affected individuals: 6,376state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)Credentials
Data elements: NameSocial Security numberDriver's licence numberFinancial account numberDate of birthHealth insurance IDMedical information
WA-stated cause: Unauthorized Access
WA-stated duration: lifecycle 1-99dexposure 0d
WA-stated discovery: Found after the fact
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Washington Office of the Attorney General
Initial access: exploit_public_facing

During the incident: Took steps to block the unauthorized access
Initiated its response process, including launching an investigation of the incident with the support of third party cybersecurity experts
Notified law enforcement
Offering these individuals two years of complimentary identity monitoring services, including credit monitoring and identity theft protection services
Established a dedicated call center to answer questions
Deployed additional security measures and tools with the guidance of third-party experts to strengthen the ongoing security of its network
Changes made: Deployed additional security measures and tools with the guidance of third-party experts to strengthen the ongoing security of its network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(109 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 7 states

View merged incident ↗

Washington State AGJun 30 · first · this page

Indiana State AG+20d

Maine State AG+20d

California State AG+31d

California State AG+45d

Oregon State AG+49d

California State AG+49d

Maine State AG+49d

California State AG+52d

New Hampshire State AG+52d

South Carolina State AG+69d

Pattern: first filing Jun 30 (WA), last Sep 7 (SC) — a 69-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 18 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA24669.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 30, 2023
Raw hash: 21ecd8a0b124f726fb55cd4031adf3624154f4e6643cc09087d73d0fb91f5f0c

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityOrrick, Herrington & Sutcliffe LLP

Victim entityOrrick, Herrington & Sutcliffe LLP

Incidentdiscovered Mar 13, 2023

Stated responseTook steps to block the unauthorized access

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com