MalwareProfessional ServicesProfessional ServicesRansomwareREvilRansom DemandedData ExfiltratedData EncryptedIdentity (basic)Government IDHealth (basic)EducationMediumContained

Bricker & Eckler LLP

bd_819ff00206636e79 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 31, 2021

Filed

Apr 5, 2021

To disclose

9 weeks

Affected

15state residents only

Linked

7 filings

Confidence

65%

Full breach record for Bricker & Eckler LLP →

Bricker & Eckler LLP notified the NH Attorney General of a ransomware attack involving Sodinokibi malware. Unauthorized access occurred Jan 14-31, 2021; discovered Jan 31, 2021. 15 NH residents affected. Data included PII, SSNs, driver's licenses, health/education info. Bricker recovered data, notified FBI, offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 17 days

discovery → filing · 9 weeks / 64 days

Jan 14, 2021

Begins

Jan 31, 2021

Discovered

Apr 5, 2021

Filed

vs. sector median

9 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Montana State AGbd_050810a4d81cb5192021-04-06 · +1dVerified
Indiana State AGbd_213787199d8bafc32021-04-06 · +1dVerified
Massachusetts State AGbd_0a51a13ab48a05232021-04-02 · +3dVerified
Maine State AGbd_795e89cdbfda35b42021-04-02 · +3dCandidate

Show 2 more filings ↓up to 3d gap

California State AGbd_83445976027bfd5e2021-04-02 · +3dVerified
HHS OCRbd_fc0ed20e70edc30d2021-04-02 · +3dVerified

Name: Norton Rose Fulbright US LLP
norm: norton rose fulbright us

Name: Bricker & Eckler LLP
norm: bricker eckler
Industry: Professional Servicesllm

Discovered: Jan 31, 2021
Breach occurred: Jan 14, 2021 – Jan 31, 2021
Undetected for: 17 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 6, 2021
Affected individuals: 15state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Education
Data elements: Date of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified the Federal Bureau of Investigation

During the incident: Immediately launched an investigation
Engaged cybersecurity and forensic firms to determine the nature and scope of the incident
Notified the Federal Bureau of Investigation
Retrieved the data involved from the unauthorized party and has taken steps to delete the data
Completed its review of the data and began notifying clients
Offering 12 months of complimentary credit monitoring and fraud protection services
Providing a toll-free hotline for the individuals to call with any questions regarding the incident
Changes made: Implemented additional security protocols designed to enhance the security of its network, internal systems and applications
Continues to evaluate additional steps that may be taken to further increase its defenses going forward
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(64 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Massachusetts State AGApr 2 · first

Maine State AGApr 2 · first

California State AGApr 2 · first

HHS OCRApr 2 · first

New Hampshire State AG+3d · this page

Montana State AG+4d

Indiana State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/bricker-eckler-20210405.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 5, 2021
Raw hash: fdb963fb4a12a5606768688dc349dea2c5c7f775a36ec0c9e661279617ffc1b7

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityNorton Rose Fulbright US LLP

Victim entityBricker & Eckler LLP

Incidentdiscovered Jan 31, 2021

Stated responseImmediately launched an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov