MalwareProfessional ServicesProfessional ServicesRansomwareData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

WARNER NORCROSS & JUDD LLP

bd_75d9e8c0060fb900 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 22, 2021

Filed

Aug 15, 2022

To disclose

42 weeks

Affected

747state residents only

Linked

16 records

Confidence

69%

Full breach record for WARNER NORCROSS & JUDD LLP →

Warner Norcross & Judd, LLP, a Michigan-based legal services provider, experienced a ransomware incident on October 22, 2021. The breach compromised personal information, including names, SSNs, and driver's license numbers, of approximately 747 Washington residents. WNJ retained cybersecurity experts, secured its environment, and sent notification letters on August 5, 2022, offering complimentary identity monitoring services.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d42 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 42 weeks / 297 days

Oct 22, 2021

Begins

Oct 22, 2021

Discovered

Aug 15, 2022

Filed

vs. sector median

+23 wks slower

This filing is one of 16 records about the same incident.View merged incident

A leak claim by lockbit2 about this victim was first seen 297 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Oregon State AGbd_dfe1fbee0bbd3f4d2022-08-15Verified
South Carolina State AGbd_185e32487ad609b12022-08-16 · +1dVerified
Montana State AGbd_c137348086f577f62022-08-16 · +1dVerified
California State AGbd_0baa95ef76b9eafb2022-08-17 · +2dVerified

Show 6 more filings ↓up to 35d gap

Maine State AGbd_430a60ac669603be2022-08-17 · +2dVerified
HHS OCRbd_ae40e08f1e80359d2022-08-24 · +9dVerified
California State AGbd_fdf043ef43ed64a22022-08-25 · +10dVerified
Washington State AGbd_338a07619d8801bb2022-08-26 · +11dCandidate
Oregon State AGbd_aea898af76dc20522022-08-26 · +11dVerified
Maine State AGbd_59eb28098f9a7ec42022-07-11 · +35dVerified by operator

Showing first 10 of 15 linked disclosures.

Name: Lewis Brisbois Bisgaard & Smith, PLLC
norm: lewis brisbois bisgaard smith

Name: WARNER NORCROSS & JUDD LLP
norm: warner norcross judd
Domain: wnj.com
Industry: Professional Servicesllm

Discovered: Oct 22, 2021
Breach occurred: Oct 22, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 5, 2022
Affected individuals: 747state-resident count only
Data types: Identity (basic)Government ID
Data elements: NameSocial Security numberDriver's licence number
WA-stated cause: Cyberattack
WA-stated duration: lifecycle Unknowndexposure Unknownd
WA-stated discovery: Found after the fact
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified Washington Attorney General Bob Ferguson
Initial access: valid_credentials

During the incident: Took immediate steps to secure the environment
Retained outside cybersecurity experts to conduct an investigation
Undertook an extensive review of the affected systems
Provided notice to those individuals out of an abundance of caution
Offering complimentary identity monitoring services
Sent notification letters via USPS First Class Mail
Changes made: Reviewing its current security protocols
Adding additional security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 42 weeks(297 days from discovery to filing)
Compliance flags: WA AG >90dLeak >180d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 7 states

View merged incident ↗

Maine State AGJul 11 · first

Oregon State AG+35d

Washington State AG+35d · this page

South Carolina State AG+36d

Montana State AG+36d

California State AG+37d

Maine State AG+37d

HHS OCR+44d

California State AG+45d

Washington State AG+46d

Oregon State AG+46d

Pattern: first filing Jul 11 (ME), last Aug 26 (OR) — a 46-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 15 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA14516.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 15, 2022
Raw hash: bad05d4e2871279f59a0b13cc7a68ed6ea86f9dfc8f69639605ddbe9afbcc06c

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityLewis Brisbois Bisgaard & Smith, PLLC

Victim entityWARNER NORCROSS & JUDD LLP

Incidentdiscovered Oct 22, 2021

Stated responseTook immediate steps to secure the environment

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com