HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedEmployee Data InvolvedDelayed DiscoveryIdentity (basic)Government IDEmploymentPHIHealth (basic)HighContained

Wolf Haldenstein Adler Freeman & Herz LLP

bd_747af5a683f6a74f · schema v1 · pii pii-v1

Severity

High

Discovered

Dec 13, 2023

Filed

Nov 13, 2025

To disclose

—

Affected

79,732state residents only

Linked

16 records

Confidence

67%

Full breach record for Wolf Haldenstein Adler Freeman & Herz LLP →2 incidents on file

Wolf Haldenstein Adler Freeman & Herz LLP, a law firm, detected suspicious network activity on December 13, 2023. An unauthorized actor accessed files and data. Affected data includes names, SSNs, employee IDs, medical diagnoses, and claim info. 79,732 Maryland residents and 16,071 Rhode Island residents were notified via substitute notice on January 13, 2025, due to lack of address information for some individuals. The firm engaged cybersecurity experts, secured networks, and enhanced privacy policies.

J jump to incidentP pin to compareR raw source

Incident timeline

Dec 13, 2023

Discovered

Nov 13, 2025

Filed

This filing is one of 16 records about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Maryland State AGbd_96d242fcec7fed342025-11-13Verified by operator
Rhode Island State AGbd_3e9cc9ff1838a31e2025-01-28 · +289dVerified
Massachusetts State AGbd_8552ef9d273399f82025-01-17 · +300dVerified by operator
South Carolina State AGbd_9b1cd8fcc3d360312025-01-17 · +300dVerified by operator

Show 6 more filings ↓up to 304d gap

Iowa State AGbd_f6dabcb4a2c109fc2025-01-17 · +300dVerified by operator
Washington State AGbd_8fc1c900a335fed52025-01-16 · +301dVerified by operator
Maine State AGbd_59773b3aabb12e552025-01-15 · +302dVerified
California State AGbd_d2bd2e440c25b7392025-01-15 · +302dVerified by operator
New Hampshire State AGbd_01c8c467936f5ef02025-01-14 · +303dVerified by operator
Indiana State AGbd_3f19b595050c24cc2025-01-13 · +304dVerified

Showing first 10 of 15 linked disclosures.

Name: Wolf Haldenstein Adler Freeman & Herz LLP
norm: wolf haldenstein adler freeman herz
Domain: whafh.com

Name: Wolf Haldenstein Adler Freeman & Herz LLP
norm: wolf haldenstein adler freeman herz
Domain: whafh.com
Industry: Professional Servicesllm

Discovered: Dec 13, 2023
Materiality determined: —
Notification sent: Jan 13, 2025
Affected individuals: 79,732state-resident count only
Data types: Identity (basic)Government IDEmploymentPHIHealth (basic)
Data elements: Social Security numberMedical information
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Maryland Attorney General

During the incident: Took steps to secure its network
Engaged a specialized cybersecurity firm to investigate the nature and scope of the incident
Conducted an examination of its systems and networks
Undertook a time-consuming and detailed review of the data stored on the servers
Reviewed and enhanced its existing policies and procedures related to data privacy
Offering complimentary credit monitoring to individuals who believe they may be affected
Changes made: Reviewed and enhanced its existing policies and procedures related to data privacy to reduce the likelihood of a similar future event
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 10 states

View merged incident ↗

Indiana State AGJan 13 · first

New Hampshire State AG+1d

Maine State AG+2d

California State AG+2d

Washington State AG+3d

Massachusetts State AG+4d

South Carolina State AG+4d

Iowa State AG+4d

Rhode Island State AG+15d

Maryland State AG+304d

Maryland State AG+304d · this page

Pattern: first filing Jan 13 (IN), last Nov 13 (MD) — a 304-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 15 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376188.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 13, 2025
Raw hash: 25926854766551375f2276562eb00ea905b47f510b2293ecbff08609e0dfcf48

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityWolf Haldenstein Adler Freeman & Herz LLP

Victim entityWolf Haldenstein Adler Freeman & Herz LLP

Incidentdiscovered Dec 13, 2023

Stated responseTook steps to secure its network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov