HackingProfessional ServicesProfessional ServicesStolen CredentialsData ExfiltratedIdentity (basic)Government IDMediumContained

Wright, Moore, DeHart, Dupuis & Hutchinson, LLC

bd_770f3d75e2da00a7 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 11, 2023

Filed

Sep 23, 2024

To disclose

15 months

Affected

Not disclosed

Linked

7 records

Confidence

66%

Full breach record for Wright, Moore, DeHart, Dupuis & Hutchinson, LLC →

Wright, Moore, DeHart, Dupuis & Hutchinson, LLC notified consumers of a data security incident discovered on July 11, 2023, involving unauthorized access to personal information. The breach may have affected names and government identifiers (e.g., SSN). The firm engaged cybersecurity experts, conducted a review, and offered complimentary credit monitoring services to affected individuals.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday15 months discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 15 months / 440 days

Jul 11, 2023

Discovered

Sep 23, 2024

Filed

vs. sector median

+44 wks slower

This filing is one of 7 records about the same incident.View merged incident

A leak claim by alphv about this victim was first seen 391 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitealphvbd_ad5c3e9784dfab562023-08-29 · +391dVerified by operator

Regulatory filings (5) · sorted by filing gap

California State AGbd_d29a7a549eca7bdd2024-09-24 · +1dVerified by operator
Massachusetts State AGbd_e3d01385e524a45f2024-09-24 · +1dVerified
Maine State AGbd_988f44a7da50d8472024-09-25 · +2dVerified by operator
Indiana State AGbd_9511371cc02b3ee62024-09-19 · +4dVerified by operator

Show 1 more filing ↓up to 4d gap

Montana State AGbd_e4c7a55302fe5c1b2024-09-19 · +4dVerified by operator

Name: Wright, Moore, DeHart, Dupuis & Hutchinson, LLC
norm: wright moore dehart dupuis hutchinson
Domain: wmddh.com

Name: Wright, Moore, DeHart, Dupuis & Hutchinson, LLC
norm: wright moore dehart dupuis hutchinson
Domain: wmddh.com
Industry: Professional Servicesllm

Discovered: Jul 11, 2023
Materiality determined: —
Notification sent: Jul 18, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Launched an investigation with the assistance of leading cybersecurity experts
Engaged an independent team to conduct a comprehensive review of all potentially affected data
Implemented additional security features to reduce the risk of a similar incident occurring in the future
Offering a complimentary Equifax Credit Watch Gold membership
Changes made: Implemented additional security features to reduce the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 months(440 days from discovery to filing)
Compliance flags: VT AG >45 bdayLeak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Indiana State AGSep 19 · first

Montana State AGSep 19 · first

Vermont State AG+4d · this page

California State AG+5d

Massachusetts State AG+5d

Maine State AG+6d

Pattern: first filing Sep 19 (IN), last Sep 25 (ME) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2024-09-23-wright-moore-dehart-dupuis-hutchinson-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 23, 2024
Raw hash: 14ea556482d634778729658c3c946e6bc2fc2c89cf27dc7f6df6eeec0d21d2b1

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityWright, Moore, DeHart, Dupuis & Hutchinson, LLC

Victim entityWright, Moore, DeHart, Dupuis & Hutchinson, LLC

Incidentdiscovered Jul 11, 2023

Stated responseLaunched an investigation with the assistance of leading cybersecurity experts

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov