MalwareProfessional ServicesProfessional ServicesRansomwareRansom DemandedTargetedPIIIdentity (basic)Government IDMediumContained

Kingsley and Kingsley Lawyers

bd_73097b477c5e10af · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 21, 2021

Filed

Apr 18, 2022

To disclose

34 weeks

Affected

7state residents only

Linked

7 filings

Confidence

66%

Full breach record for Kingsley and Kingsley Lawyers →

Kingsley & Kingsley Lawyers reported a ransomware attack on August 21-22, 2021, affecting two servers. The attack disrupted operations, and seven New Hampshire residents' PII (names and SSNs) were potentially accessed. KKL engaged forensic investigators, law enforcement, and delayed notification. Affected individuals were notified on April 1, 2022, and offered one year of Kroll identity monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 34 weeks / 240 days

Aug 21, 2021

Begins

Aug 21, 2021

Discovered

Apr 18, 2022

Filed

vs. sector median

+16 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Maine State AGbd_0748c9684dc09cf32022-04-15 · +3dVerified
Massachusetts State AGbd_25d81f706178edbd2022-04-15 · +3dVerified
California State AGbd_f0918a57511e72802022-04-15 · +3dVerified
Oregon State AGbd_57ab81d7d9549f3a2022-04-07 · +11dVerified

Show 2 more filings ↓up to 17d gap

Indiana State AGbd_36ea5ef01e481ba62022-04-01 · +17dVerified
Montana State AGbd_660598c74cbcbc122022-04-01 · +17dVerified by operator

Name: Kingsley and Kingsley Lawyers
norm: kingsley and kingsley lawyers

Name: Kingsley and Kingsley Lawyers
norm: kingsley and kingsley lawyers
Industry: Professional Servicesllm

Discovered: Aug 21, 2021
Breach occurred: Aug 21, 2021 – Aug 22, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 1, 2022
Affected individuals: 7state-resident count only
Data types: PIIIdentity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: consulting with appropriate law enforcement authorities

During the incident: Commenced a thorough investigation
Engaged forensic investigators and expert legal counsel
Consulting with appropriate law enforcement authorities
Delayed notification of this incident while conducting investigation and working with law enforcement
Physically disconnected the two servers from the network and powered them down
Secured the services of Kroll to provide identity monitoring at no cost to you for one year
Changes made: Implemented additional technical, administrative, and personnel safeguards to protect information
Educated its employees on identifying and responding to security incidents
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 34 weeks(240 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Indiana State AGApr 1 · first

Montana State AGApr 1 · first

Oregon State AG+6d

Maine State AG+14d

Massachusetts State AG+14d

California State AG+14d

New Hampshire State AG+17d · this page

Pattern: first filing Apr 1 (IN), last Apr 18 (NH) — a 17-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/kingsley-kingsley-20220418.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 18, 2022
Raw hash: a6bf671062496ddbb761020700a3c909d2f614d6c76e98a822743ed502e7e344

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityKingsley and Kingsley Lawyers

Victim entityKingsley and Kingsley Lawyers

Incidentdiscovered Aug 21, 2021

Stated responseCommenced a thorough investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov