HackingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedPIIIDENTITY_BASICLowContained
Fried, Frank, Harris, Shriver & Jacobson LLP
bd_786831cef9a1e06f · schema v1 · pii pii-v1
Full breach record for Fried, Frank, Harris, Shriver & Jacobson LLP →Fried, Frank, Harris, Shriver & Jacobson LLP notified consumers of a cybersecurity incident where an unauthorized third party compromised a user account to copy files containing personal information from a shared network drive between Oct 23-28, 2025. The firm contained the breach, engaged forensic experts, reported to law enforcement, and provided two years of credit monitoring.
Vermont clock✗ VT AG >45 bday19 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_17a53c023f0ba104Maine State AGfiled 2026-03-06Candidate
- bd_8c894c19fa1ea217South Carolina State AGfiled 2026-03-06Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-03-06-fried-frank-harris-shriver-jacobson-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 6, 2026
- Raw hash
- 788bf97edd0d51ea89a17587ef01b85eff109c5c2e95215becf25ffc7600b901
Reporting entity
- Name
- Fried, Frank, Harris, Shriver & Jacobson LLPnorm: fried frank harris shriver jacobson
- Domain
- friedfrank.com
Victim entity
- Name
- Fried, Frank, Harris, Shriver & Jacobson LLPnorm: fried frank harris shriver jacobson
- Domain
- friedfrank.com
Incident
- Discovered
- Oct 27, 2025
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- reported the matter to law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 19 weeks(130 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.