MalwareRansomwareData ExfiltratedData EncryptedData PublishedData Leak ThreatenedIDENTITY_GOVERNMENTIDENTITY_BASICPIIMediumContained

Kronick Moskovitz Tiedemann & Girard

bd_6ce3ae8b314e3c48 · schema v1 · pii pii-v1

Full breach record for Kronick Moskovitz Tiedemann & Girard →

Kronick Moskovitz Tiedemann & Girard, a California law firm, notified the Maryland Attorney General on January 27, 2025, of a cybersecurity incident detected on August 6, 2024. An unknown third party gained unauthorized access to the firm's network, attempting to encrypt systems (blocked by EDR) and successfully exfiltrating data, which was briefly posted on the dark web. The incident affected 4 Maryland residents, involving Social Security Numbers, dates of birth, and employee benefits information. The firm engaged forensic experts, notified law enforcement, and provided 24 months of credit monitoring to affected individuals.

Leak gap clock✗ Leak >180d15 months discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4 affectedView incident

A leak claim by rhysida about this victim predates this filing by 464 days.View originating leak claim

Source provenance

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376246.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 13, 2025
Raw hash: 3f876631c38a81d0f4258a9837d4ad4e637e25d919ec7731257373580de18f14

Reporting entity

Name: Kronick Moskovitz Tiedemann & Girard
norm: kronick moskovitz tiedemann girard
Domain: kmtg.com

Victim entity

Name: Kronick Moskovitz Tiedemann & Girard
norm: kronick moskovitz tiedemann girard
Domain: kmtg.com

Incident

Discovered: Aug 6, 2024
Materiality determined: —
Notification sent: Jan 27, 2025
Affected individuals: 4
Data types: IDENTITY_GOVERNMENTIDENTITY_BASICPII
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified Maryland Attorney General

Compliance

Time to disclose: 15 months(464 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Extraction provenance

Status: No extraction artifact recorded for this disclosure.